35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b

Analysis

user interaction
yes
max time kernel
6s
max time network
245s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
25/08/2026, 15:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Size 43.7MB
Sample260825-tccyqsbr21
SHA256 35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b
MD5 ce49a90c0a098e8737e266471d323626
SHA1 41c4ae3e0c26cabaad90f96eaa6a6ab688560b77
SHA512 a7ef1bbc1129ad1701b5e15a208b8b868ddc7edf2d540b68a35427e2eaedf1e76807f1369ca80691a99312c417e25d0914a5f46958acfeea4df7e45a0fc639f1
SSDEEP 786432:mYkcVVbGRRqzSxmxoFV+I2M320poUNZddKWsAdQeizWy/MlaGVq:mJcjGRsWQPM2kNtHQeizWy/I1q
TLSH
T10DA73386F39AF0AEC9B3803B8B7B176413A14C8AC596CA335165F29CDD779805E44FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vpn.lofun

com.vpn.lofun
1⤵
- Queries information about active data network
PID:4064

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ssr_client.db

Path /data/data/com.vpn.lofun/databases/ssr_client.db
Size 24KB
SHA256 6c0440db0eb583ea431b4e8f0be1124ec5068abe0a162ad81c22ba5005457d55
MD5 b5ee7d4c6f2b81c3ef8a46e0838e4c2b
SHA1 d00b4cd03befd42e3734fa8822e0e8f7b4c7208d
SHA512 c4ad24297d978828589417de590a8e284de65ac00d59e03548a3484be1f25808c704cbd34cf94e0509d28b006d79aaf9f3cf7a2cceeff4679e2da279ee5784be
SSDEEP 24:TLhlDaiaolS0RiYvivlXPaoloVHB+0dQHVl19CAU6NUdGSzGQ:TDxzlTiYKvNpEQHVdCl6aIS
TLSH
T148B224FA4D607B18C60464762E6233B1407F6E6E8573A7845DB450633C63574F6609FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 512B
SHA256 cb1076fb89606eb4e1e7d23e8f9603dc737c735876064901b2c0ba662ffd4630
MD5 59a1eedc68dbd2d2565275d6a0ffd4f3
SHA1 48cdeb3ab789e28a5a2dd99fbb350a58ac34a977
SHA512 d892f3e7aee51dc58ddcf7e0f8e473f8f6b5959fa74d339ee2c727dc497c78a46513685537861bbd127d438af4f9a924b63001aa44740d53709b72c6d8e2a5d6
MD5 SHA1 SHA512

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 8KB
SHA256 5212f91c766349a2e1041868ae6c61ffd250b06c2561a38d6deb0c18eec1ddc5
MD5 52ff393a041449c2de62dd66afcdc14a
SHA1 063ff931a4fe7ab3fedea2032e907d886139e20c
SHA512 0b60997f708363369104dafb3abe05ecc8519a88cdb8db49e338a7a28d1308281579f2470028353e6fb93d968cd812c6b90903e3cf33ffe0265d0c3421257d07
SSDEEP 6:7+/l9nfl4n1Bg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK8vH:7+tFflEqLiuWd7RmBEyPbB
TLSH
T1B902C09CE3801D53CC3D56B790E483400D00E718D2B2CB0719A048947C03CCCE4A0D18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 8KB
SHA256 074ed233b186d6a101c5c46e0b3d2a5bc9e5f51e5753c80beaec1fd0bb51d567
MD5 9b0e6f6f037d1bc137d05833a27a5c75
SHA1 82dce5bc1536da8bbf79c8b640d47535d04a644a
SHA512 cd6a631ef7315af62d3f6d6514bb3eaf593f412928a82c228af55a40f94fe0029a0fc044695ac045ebb25af800550417e98c3d2dad45f61355f8865058df1799
SSDEEP 6:7+/l9K4Pg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKW/W:7+tfqLJdKBRmBEyPbxW
TLSH
T18302228967400803C129777790D883401F10A728E3B3CB4B055028942C026CDACA0D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads