f0d8a3764bcbd8f0c3ed326b16da5cffa6266c16945bf942ea87bf5f1573da71

Resubmissions

06/09/2026, 02:47

260906-c9186awhqf7

06/09/2026, 02:44

260906-c79grawhqd7

05/09/2026, 07:00

260905-hs47dacd787

01/12/2025, 11:43

251201-nvmyrsxkaz7

Analysis

max time kernel
11s
max time network
46s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
05/09/2026, 07:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
techdomslob.apk
Size 5.6MB
Sample260905-hs47dacd78
SHA256 f0d8a3764bcbd8f0c3ed326b16da5cffa6266c16945bf942ea87bf5f1573da71
MD5 6731c72ea73801e2ec2934d8d391f29c
SHA1 5a10d0e08a6fa4912a420449d2ae1ec2e43aa123
SHA512 b4618cbd7a0405b976aadbdf59ccceab1eaa96c06fda7e1175c50aa95e9016bc6e38db6c8f7d23a9886bf0b11ba53940c0b6f1caf14c65fc50f76f2762ae1a77
SSDEEP 98304:20oTYrtLlbxRMxu1JEeBVDdXbSnT4+U7sen8TCDzAi2DnbvV+/RgkgVxo4fpB6:2ylbzJEk8nT4+U7sUz2DncykgVu4BI
TLSH
T16E56F147F358A92FC83750F249BE563156478C128A83DB836D58720C69BB6D43F9AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/contacts	com.techdom.kiosk

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.techdom.kiosk

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.techdom.kiosk

com.techdom.kiosk
1⤵
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Tries to add a device administrator.
PID:4380

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Data from Local System

T1533

Protected User Data

T1636

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.techdom.kiosk/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/com.techdom.kiosk/files/profileInstalled
Size 24B
SHA256 eefa4670bb86cf4f15aeba1e1a700bf36a06524363c9f2bdc0521484af66cc39
MD5 d28864d854324ab31daa4b83e33ffc0c
SHA1 f5d41caa9f2edbfa18594aa189fb60da5fda9a15
SHA512 65eb24111cdb8eb92ec3644f7ff89a1d4f0bb128a57d15f58ec0b2be89f6bd78a83aeeeb355de5fc2b79ec374370cc2cd2570f848bbe48b6a08fcb659157cdb5
MD5 SHA1 SHA512