Analysis
- max time kernel
32s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/09/2026, 22:45
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
Resource
android-x64-20260325-en
3 signatures
150 seconds
General
- Target f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
- Size 23.4MB
- Sample260901-2pg28ack6w
- SHA256 f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e
- MD5 fa58a57efee91e83fb37d7d4f9edf92f
- SHA1 34666840b8745e033778782ed18b0b315060dc4d
- SHA512 2305e573de5e569a35ab6763cbb14d126326c1f629b8e364a7579ded2be3dc049e20aaf0a4c6541586600a3d9cdbce24ba7278616f62b409c927c721d3dc6b16
- SSDEEP 393216:M6W4Pq67mpqNQ3o7+bYsGi1/nEToPkTXsKI9DEtVj5EIfWmjnWl7yWbpZT/Q:o4J7oY7+bYRSqosDWDEfj5CpVQ
- TLSH T163372387FB88592BC4F753B645761721154B4E228B47DBC7AD54323C28BB6D02F8EAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.ftno.gf8zbhaxrume9a/[email protected] 5042 com.ftno.gf8zbhaxrume9a - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ftno.gf8zbhaxrume9a - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ftno.gf8zbhaxrume9a
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ftno.gf8zbhaxrume9a/oat/x86_64/[email protected]
- Size 192B
- SHA256 17d246795cb6d1797044a2b17cdd76e12ccaaf56b0457e7f840997384cac90c8
- MD5 77ca4493ede30723cb5c06490c6eab35
- SHA1 9d9b016ee026b6df4af41fc4eede7e1d227b576a
- SHA512 58060806bc5551124c719d7298dea5e916b982253c06978e09bae23374e57a0a27ab8dfd7df176d0a885baa6fe663941162b89bfddb67d125d12721967f306a2
- TLSH T184C0127BA19029A9CF848EB45A5D874A0454BAD26D1263D10AA452E4DD624913400A16
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.ftno.gf8zbhaxrume9a/[email protected]
- Size 8.3MB
- SHA256 ce0c0c9c723d7b77c02576f18b033f6ef7dc9e31bc46c03060169f05eaabdfc2
- MD5 3092752de1b0bf17e37daa974ee6bdb0
- SHA1 f192ba4f7133d00ca7e9e9b26be75b0277ab53d7
- SHA512 9996619a5301f041fcf1317b7550b9c136a856fce39832c4ad827dc8686e0c9ce8cc68ac4e4924132b828b369c375a511833deb69d803a583026e89784adcd49
- SSDEEP 98304:UZaFUiEsMjmMq+3my3zcZQg3rU8477Uc20xsJigHfId:AaOg7Ugc2FId
- TLSH T13A967C17FB165932E56E93776DFB4315B7326346B7836B4B2484C1FC7C822C0AAA9384
- MD5 SHA1 SHA512 SSDEEP TLSH