35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b

Analysis

user interaction
yes
max time kernel
6s
max time network
246s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
25/08/2026, 15:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b.apk
Size 43.7MB
Sample260825-tccyqsbr21
SHA256 35c8c95c7f72872e733dfd29280df12bfe9950a760d2a346f4be6c2e399e5a4b
MD5 ce49a90c0a098e8737e266471d323626
SHA1 41c4ae3e0c26cabaad90f96eaa6a6ab688560b77
SHA512 a7ef1bbc1129ad1701b5e15a208b8b868ddc7edf2d540b68a35427e2eaedf1e76807f1369ca80691a99312c417e25d0914a5f46958acfeea4df7e45a0fc639f1
SSDEEP 786432:mYkcVVbGRRqzSxmxoFV+I2M320poUNZddKWsAdQeizWy/MlaGVq:mJcjGRsWQPM2kNtHQeizWy/I1q
TLSH
T10DA73386F39AF0AEC9B3803B8B7B176413A14C8AC596CA335165F29CDD779805E44FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.vpn.lofun

com.vpn.lofun
1⤵
- Queries information about active data network
PID:3285

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.3285.tmp

Path /data/data/com.vpn.lofun/cache/oat_primary/x86_64/base.3285.tmp
Size 81KB
SHA256 440e5c976752e3c9f9ceb08065c5984bd1e5db4ca9b1690a31661d97ddfe608c
MD5 d7ade6ee4818ed3a09962312f87feb91
SHA1 dcdb5b56bbc4c275fd1136ec1a48ef651c2e5481
SHA512 d35fd3ac14d64f6654d011ac2590c058fbdff2f16cae905aebb72b03c58aa9eed6f5a5a67b2ef30a90a58437bedaefef43b2cb1c8117b13b7a1a170559efe5d8
SSDEEP 1536:dBjvtrJhR9yksKoUVgFFRVqKALdG3GOOjbbPdsfL:jjvtjR9yk0UCbRVfW8CdsfL
TLSH
T113835DAFBF219091C1E77FF68A4705F4EE31C520664A6914F866273EA427F04DB60F68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssr_client.db

Path /data/data/com.vpn.lofun/databases/ssr_client.db
Size 24KB
SHA256 0190846e758d4850f2febd452822b456cc89b724dc66148a6020ea9d0e8049a8
MD5 d0fd07ba32042091a9e7a92f6192477b
SHA1 8ded13b3d9d85d7a6fcbeba98501e68947fca678
SHA512 e793ee19630f72e1bb47125235e8a9554da74888f33cdf978828230377a1d2c2e15d8e3ff2f3c8c0aed00b3741463d86feaba8353fc1b2f5f1f4f336c7c449dd
SSDEEP 24:TLa6lDaiaolS0RiYvivlXPaoloVHB+0dQHVl19CAU6NUdGSzGQ:TmWxzlTiYKvNpEQHVdCl6aIS
TLSH
T166B224FA4D607B18C60464762E6233B2407F6E6E8573A7845DB450623C63574FA209FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 512B
SHA256 4a9a45b0c9ed050b3a42e4718b72354afea8c34b12a7988d73cba26a9d78fd25
MD5 57e3debbcdaa3771310ac65129d19817
SHA1 4f59ff319b75e2f6eddda23bdce22e5f49265cb8
SHA512 f09ee391552a31f203084430bcd636c179a0d302745da0ee88699552703bc43e37d73969db0f6d16d249877deb6c4acba2f0d9676ce3064f184caf9ddecacdc1
MD5 SHA1 SHA512

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 8KB
SHA256 cbac1345b50559775203225fac2d5613beb1a051c9fc5e0f6dfa7f553fbd72b7
MD5 df7e27a71e086d4764612a578a8d6774
SHA1 4191d6643c780ecd45dd1eed657a87c9afe2571f
SHA512 44caacdc848447b5768ca91aff75a9d060fd268f0b9d0df20477c7525b49cc7ceef8e0d2fcf1960b57b906c86e58735fa52815af574d4e844247117864ba68fa
SSDEEP 6:7+/l9CFn1Pg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuK0:7+tsqLiuWdQoRmBEyPbf
TLSH
T13102C0DC67810C13C81D567BE0D483990E10F72E8971CB1B467008943C074CCECE0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssr_client.db-journal

Path /data/data/com.vpn.lofun/databases/ssr_client.db-journal
Size 8KB
SHA256 3b59495a56c4539a6a6cd50509a67bf4025d97bee0729ed1b18d08eefcfb02c5
MD5 ab9c6e1f07360101511cd99b3a2d4e8e
SHA1 f4112de56366d3bb137561c6dd20543a4287afcc
SHA512 18faa56fa244a0e35b49babbde4f16098db613fed7c94b8c8752b891370d2352ac09637910beeb8850f108fa5c4f356d95910231e9f461e48983def8a20df964
SSDEEP 6:7+/l9zv4Pg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKoDp/y//Bn:7+tRYqLJdvloRmBEyPbvyXB
TLSH
T10B02C08C67C10813C01D1B7790C8C3581E20A7298333CB07056008543C036CCECD4D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads