Analysis
- max time kernel
32s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
01/09/2026, 22:45
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
Resource
android-x64-20260325-en
3 signatures
150 seconds
General
- Target f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e.apk
- Size 23.4MB
- Sample260901-2pg28ack6w
- SHA256 f885885e1abba77b387706cba13aa51ab632b4d525b8e78c16db0f4ad6396a4e
- MD5 fa58a57efee91e83fb37d7d4f9edf92f
- SHA1 34666840b8745e033778782ed18b0b315060dc4d
- SHA512 2305e573de5e569a35ab6763cbb14d126326c1f629b8e364a7579ded2be3dc049e20aaf0a4c6541586600a3d9cdbce24ba7278616f62b409c927c721d3dc6b16
- SSDEEP 393216:M6W4Pq67mpqNQ3o7+bYsGi1/nEToPkTXsKI9DEtVj5EIfWmjnWl7yWbpZT/Q:o4J7oY7+bYRSqosDWDEfj5CpVQ
- TLSH T163372387FB88592BC4F753B645761721154B4E228B47DBC7AD54323C28BB6D02F8EAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.ftno.gf8zbhaxrume9a/[email protected] 4732 com.ftno.gf8zbhaxrume9a - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ftno.gf8zbhaxrume9a
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ftno.gf8zbhaxrume9a/oat/x86_64/[email protected]
- Size 371B
- SHA256 0068e2c48fa96fb0e9be3fd019fdd38105a77a695b1df733f61b588a4f0e8462
- MD5 50b833a18dd9c2f4c14c248e2a75ddce
- SHA1 8cffb9c12425b1f218c83798cb98753650c04b56
- SHA512 079ed74a16d40506a218959581f5aa27ae0d4e77a00685993fbd2dd3e26acf42a3077e9769398efc0594c241e6879b836da9eac165be305b507dd7a42bdf19fc
- TLSH T14AE0C0B6B2568014DE8167783B4D8603235879E33C038ED305A716D0ACC3CE93C55D5F
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.ftno.gf8zbhaxrume9a/[email protected]
- Size 8.3MB
- SHA256 ce0c0c9c723d7b77c02576f18b033f6ef7dc9e31bc46c03060169f05eaabdfc2
- MD5 3092752de1b0bf17e37daa974ee6bdb0
- SHA1 f192ba4f7133d00ca7e9e9b26be75b0277ab53d7
- SHA512 9996619a5301f041fcf1317b7550b9c136a856fce39832c4ad827dc8686e0c9ce8cc68ac4e4924132b828b369c375a511833deb69d803a583026e89784adcd49
- SSDEEP 98304:UZaFUiEsMjmMq+3my3zcZQg3rU8477Uc20xsJigHfId:AaOg7Ugc2FId
- TLSH T13A967C17FB165932E56E93776DFB4315B7326346B7836B4B2484C1FC7C822C0AAA9384
- MD5 SHA1 SHA512 SSDEEP TLSH