Analysis
- user interaction
yes - max time kernel
6s - max time network
251s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
25/08/2026, 15:54
Static task
static1
Behavioral task
behavioral1
Sample
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Resource
android-35-x64-arm64-20260325-en
General
- Target 35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
- Size 43.7MB
- Sample260825-tccyqsbr21
- SHA256 35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b
- MD5 ce49a90c0a098e8737e266471d323626
- SHA1 41c4ae3e0c26cabaad90f96eaa6a6ab688560b77
- SHA512 a7ef1bbc1129ad1701b5e15a208b8b868ddc7edf2d540b68a35427e2eaedf1e76807f1369ca80691a99312c417e25d0914a5f46958acfeea4df7e45a0fc639f1
- SSDEEP 786432:mYkcVVbGRRqzSxmxoFV+I2M320poUNZddKWsAdQeizWy/MlaGVq:mJcjGRsWQPM2kNtHQeizWy/I1q
- TLSH T10DA73386F39AF0AEC9B3803B8B7B176413A14C8AC596CA335165F29CDD779805E44FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.vpn.lofun
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.vpn.lofun/cache/oat_primary/x86_64/base.4612.tmp
- Size 84KB
- SHA256 e5dc99eb15f0c09fa53acd39be3ce03452ebc61d1c0622c2e24263005878e144
- MD5 1e2ea098aa671f1fd5dd03b576efbaf1
- SHA1 034661bf8a45b3c9579fb4a733bc43bd0cd4da8c
- SHA512 973706b50421f74ed8a4cac5b04a898c2c544445f925e4d0ec06bf997f1c8ec4575e88483f6d15fea51ed01abfcfd8f04ebe969cde05194bc7a2f29ea943916a
- SSDEEP 1536:Q/70O51HDhXzuxIJNbCvR94gVBpABbOdlva7Dz53EnHRiOCH:C7J5VVsWIHzaUdGkHjw
- TLSH T15C835CAFAE21C091C1A7BFF6CA4706F8FB25C41426466D54E4A2273E6427F14DB60F78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.vpn.lofun/databases/ssr_client.db
- Size 24KB
- SHA256 e7af3765614da67cb13859bdd14b0735d11c2902fd7e6775037e45ce433dad5c
- MD5 dfee1c7c3eadd0fbbf703316f5a1563e
- SHA1 48599520f1c028433be5149838fc75d56969b666
- SHA512 375c48f092974dba5819f33e621fd8b2e9c5645612aa7e43dd247147965f8658f39098b36e352a46bda17d23214eadcabb62026a969ce9f0244ff48eb1842c3e
- SSDEEP 24:TL9lDaiaolS0RiYvivlXPaoloVHB+0dQHVl19CAU6NUdGSzGQ:THxzlTiYKvNpEQHVdCl6aIS
- TLSH T14EB221FA4EA07B28C644687A2E6233B2407F6E6E8573A7845DB450623C63574F6209FD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
- Size 512B
- SHA256 03abdf995a1ed236d94a6e68fdc1d7ba4a06c901eea7ada76dd17702fd47f99b
- MD5 b313255f561f1496cc13acc26875fb1e
- SHA1 d4a8c240c25b120536c38eff28d5b5082a5b64c0
- SHA512 395339bb391bcdc4080f0ef2d9ab8f6e80f6be2c685cc2fccaaf3c19731c2d55534d616e73a6619ffb7bc870a7e3a381db00189fe34f60e625a29173a161c6cf
- MD5 SHA1 SHA512
- Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
- Size 8KB
- SHA256 1d7e3ede3b82854deabccfea808e04bfa8cec32f74110886661c1c3e10612b42
- MD5 36c65207af426885f17371c71ca4030b
- SHA1 1c512ec07d353606077bf5be8fd4776700a3efc8
- SHA512 e8b5d7b3448af10aa5b4ee49982d2cb3e5fe1c78ffcf314b2a7a2e297c74dbeb4da982c7c22d2d2e084abafb451a00a63b6ab2b1159643c0ec7a0a83663baca9
- SSDEEP 6:7+/l9XJFn1YRg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKmw:7+t1iqLiuWdxBRmBEyPbe
- TLSH T16E02229CA3800923C81916B7E0D8C3840E40E72881B1CB5725600C943C0B4CCE4B4D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
- Size 8KB
- SHA256 5abd2a81dc856f38e8082bb509034892ae6fd4a2f7445d9f727956545ed42c8c
- MD5 b0ba6263ac4ce6555d8a003c8646d6af
- SHA1 4570bdd431bbd0c78ea386b1cdb0aade06ae1392
- SHA512 3b630276bb5b528faa35829841b93c07ddf37608bfc6bdea02b6bfe48f4731d5caf7ee08e1ba8ff7b40f59dddb50a0d90b1f26f1e4800ba0b77cbbd66715a04d
- SSDEEP 6:7+/l9zWFPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKodB8t/F:7+tRMqLJdIRmBEyPbjB81F
- TLSH T13A022288A3420803C419AFB7B4CC83405E60A71CC233CB8706A008943C826CDE8A0D40
- MD5 SHA1 SHA512 SSDEEP TLSH