4904cc8cdbddfdc8a81d501d3346b0fd89d4ad1e3cd92a86d8b56e060b78cdc3

Analysis

max time kernel
7s
max time network
285s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
31/08/2026, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
K OTAK C REDIT C ARD,.apk
Size 1.2MB
Sample260831-wsbfysdr9s
SHA256 4904cc8cdbddfdc8a81d501d3346b0fd89d4ad1e3cd92a86d8b56e060b78cdc3
MD5 c8f884ce40f6b8d8b0f995a17b2ea47d
SHA1 f25e8eec9f55a477970fd3db9b1fe1855c6ea784
SHA512 eb4dbd5fafeca236831bedebacfaffa5b0f79a75b7d9eb18f18ee7c917ee85ae0765d8b97411c5543f8d4e963a7cdf7532b69713883c1395da15e261c9f42aac
SSDEEP 24576:OYoom+2O1oyUS0ya4rGQ0w7dc/r85Ts15FgekZz6UB3X:OY1mOoyW6n0w7kw905Zk0mH
TLSH
T1C845CF423BF16E1ECC368A3B0E5A09A41509AD1BCE27C637F513374C963F6C99E19E94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format 1 TTPs
Applies obfuscation techniques to the APK format in order to hinder analysis

Obfuscated Files or Information
T1406

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

com.asehzenith.ejavoridot.ahuhikhub
1⤵
PID:5060

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

T1406

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

payload_temp.apk

Path /data/data/com.asehzenith.ejavoridot.ahuhikhub/cache/payload_temp.apk
Size 602KB
SHA256 3a223e4d8dc3d98f158548031f754da43fd29187031643f4a1c3a9dbbf4cfa78
MD5 c6610c613879d3a12d87a8426adda349
SHA1 cdb73199e747b5e7058059297eb89875400dd48f
SHA512 4c7e29b1c8e02a2f039784f30cd9e22755b6bd66b60d6df72c893f5d82ad21c6fa0064f11e8ce76290ffd55a37aa055690fe9371553e686f892229cb9309c9d1
SSDEEP 12288:fXmWC1EkTl1iO4VsM9JyZAa2TLYgroSKf3lHvXfa6o2CVHedzf1DehmoqopsRgF6:fXmowZz2LCScvVFuyfNoHpRF6
TLSH
T14CD4CF03F2B5AB0BD874D2701D45663A101A6D28CE42B74AB5043BFD74BFAE84FC5B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.asehzenith.ejavoridot.ahuhikhub/files/profileInstalled
Size 24B
SHA256 2cf73d94d10c2fb21ee116587025190d0860ee966572a89a96192fec00594787
MD5 4278e3fcc90654a459b1e033eaea9e56
SHA1 9dd8ba3f8774718fece8580ff98618478f7f173f
SHA512 46fbcf9e0340ad82205d0eeff839c3262cddff0e05d5a55bb2072a21228f1af854976056556e4df1ec663403396123cc7a8f5a1e4923a717aaea28f1a6919532
MD5 SHA1 SHA512