e9979995cb523e25bf5c1e9dc99d4485d871dc9cb08cdca473ee9bdd3fe8ac67

Analysis

max time kernel
6s
max time network
303s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
31/08/2026, 18:06

Target
I DFC C REDIT C ARD.apk
Size 1.2MB
Sample260831-wpw89adr61
SHA256 e9979995cb523e25bf5c1e9dc99d4485d871dc9cb08cdca473ee9bdd3fe8ac67
MD5 c327fc76cea6f24a3b3dc07d2252985f
SHA1 86dc5a7a06dc8d484ca9319fb14aefeb0c69b05f
SHA512 afddb81ebb79ed018cecdcaf648b6f921983ac74e08a55c5d16b81641ed4e135ee16728219f8b25358e24892a189ca6a15da82a24a2affecb530ad9e72651fbe
SSDEEP 24576:UY6d3ArqKrqsfa2+Zz4JB3iSyU+Zz6UB3S:UY+3A2KrzfahZz4JcSH+0mi
TLSH
T1FC45C17177FB8C2DDC3781771F51E13566026C02EACBCA63B0A8769D5A3B2888F195E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Attempts to obfuscate APK file format 1 TTPs
Applies obfuscation techniques to the APK format in order to hinder analysis

Obfuscated Files or Information
T1406

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

payload_temp.apk

Path /data/data/com.networkusilivuj.elisorabececho/cache/payload_temp.apk
Size 586KB
SHA256 b9c8f6617f1f07b4be979d547b5e4c87f7d7f9a6c124d56b4b8becb3386bf69f
MD5 b5e00b525a6d62e6fb66ab00f3e2b454
SHA1 eb4b131085928abbd397875fbdb9d48fbcf0649e
SHA512 9ea796f87841ce9ca4d307e7471b7a8dfd90a0d5e906de9c5fba5839637c716ca531e3db3c73e2aad29abe49e8c872ab861ad3625b3864b08bece5ac6da9f96e
SSDEEP 12288:vmWC1EkTl1iO4VsMFW1o19qwwmg4VjzQOCur0yGCNZ2lagfywfiz9BqXyhderWr/:vmQCIt6mQjurHGCqltfNfiaElUy
TLSH
T1E2D4D052F2B6A91BCC75D2B21A48A23624172C10DB47B75B34447BFE74BFAD80B847D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download