15d39158448f02704c151cf0632486cf9b0eeb8e3ddabfd0250d0a5c3c10f0ae

Resubmissions

28/08/2026, 08:28

260828-kdb86avxbs

28/08/2026, 08:24

260828-ka6zcsvgnf7

Analysis

max time kernel
3s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
28/08/2026, 08:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
xManager.apk
Size 9.6MB
Sample260828-ka6zcsvgnf
SHA256 15d39158448f02704c151cf0632486cf9b0eeb8e3ddabfd0250d0a5c3c10f0ae
MD5 8935a29217b2035f643bd030582011a3
SHA1 b3e6c726141174727defbb7f06bb6d53c0e11d61
SHA512 6101b297e92a0d79532be70bd15da92baf3f355a9e1bfce92496177dce16abd1946ac1c025df10022f28d46065196bfbc7e6c27e4a3c4e2b6246e13745751480
SSDEEP 98304:1R6d2ZrArQEwlC53d4e56KHy7SuGs0lBep4h5ETYmIKchLIMbx23HAUDPAZ44rx4:12TEO56K/uGUaETpCLIMbx23H5PAJyh
TLSH
T142A602C8F764D92EC8379137896A273A55470D168F83C6536918770C29B7AE80F09BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xc3fff0e.xmanager

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.xc3fff0e.xmanager

com.xc3fff0e.xmanager
1⤵
- Queries information about active data network
- Checks memory information
PID:4732

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/user/0/com.xc3fff0e.xmanager/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.xc3fff0e.xmanager/databases/google_app_measurement_local.db
Size 16KB
SHA256 d5a5dc273e29058ef64f7f8f06e73747c61f9ea7c4782a7b21cdb39c6f6fcea0
MD5 138dea1a72b76471e2e7e947006d127b
SHA1 6dd3b2d17aef9a6fd2ea292553c3b7b71638da42
SHA512 e80a4eb9045fa5d2769a6d52733772fba6dd595308ff5fe72dc9e525870ce3f1140dabe7d6dedaca55d643f2027a906dc03be02af2d88c8df478cbe752bdaf99
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TLWuEmO9zmzrfRmBEyPbBvOw
TLSH
T1B472C2CDDF102606C6760733F8C9E3905DA4A22D837A9A476B950460AE42549A091F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download