f0d8a3764bcbd8f0c3ed326b16da5cffa6266c16945bf942ea87bf5f1573da71

Resubmissions

06/09/2026, 02:47

260906-c9186awhqf7

06/09/2026, 02:44

260906-c79grawhqd7

05/09/2026, 07:00

260905-hs47dacd787

01/12/2025, 11:43

251201-nvmyrsxkaz7

Analysis

max time kernel
11s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/09/2026, 07:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
techdomslob.apk
Size 5.6MB
Sample260905-hs47dacd78
SHA256 f0d8a3764bcbd8f0c3ed326b16da5cffa6266c16945bf942ea87bf5f1573da71
MD5 6731c72ea73801e2ec2934d8d391f29c
SHA1 5a10d0e08a6fa4912a420449d2ae1ec2e43aa123
SHA512 b4618cbd7a0405b976aadbdf59ccceab1eaa96c06fda7e1175c50aa95e9016bc6e38db6c8f7d23a9886bf0b11ba53940c0b6f1caf14c65fc50f76f2762ae1a77
SSDEEP 98304:20oTYrtLlbxRMxu1JEeBVDdXbSnT4+U7sen8TCDzAi2DnbvV+/RgkgVxo4fpB6:2ylbzJEk8nT4+U7sUz2DncykgVu4BI
TLSH
T16E56F147F358A92FC83750F249BE563156478C128A83DB836D58720C69BB6D43F9AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.techdom.kiosk

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.techdom.kiosk

com.techdom.kiosk
1⤵
- Reads the content of photos stored on the user's device.
- Tries to add a device administrator.
PID:4828

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.techdom.kiosk/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download