d2f23ee841bc0dcb3211bc1475b80dfeff8a7747f2aa75127c4433ab900411f2

Analysis

max time kernel
22s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
06/09/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lexpad.apk
Size 6.6MB
Sample260906-145amade48
SHA256 d2f23ee841bc0dcb3211bc1475b80dfeff8a7747f2aa75127c4433ab900411f2
MD5 b65705118fa8e077dfcc7d02ed62c97c
SHA1 be567f12f25d612f4a38ec4e075fe594a80f708e
SHA512 300789609e46dba06c25a50aee95cc6b3578b658fad3563d6d555462651c1333c7172b4370073eb7b086c5b39325e02d40ea9d8969db750fc156aff16f49faf8
SSDEEP 196608:mQfsLV9qZC4pBUjjiztb3j6DSJ7NPaUrb8:mQfdC4s/ixb3jLno
TLSH
T198661242F7A89E5FC87741720D9B5732266A8E12C7A3E343991837797C736E80E84BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	app.lexpad.android

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	app.lexpad.android

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.lexpad.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.lexpad.android

app.lexpad.android
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4389

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/app.lexpad.android/files/profileInstalled
Size 24B
SHA256 9b20790d1637843446c64e9472caeafe571d3779a0f18a66248bb3f760bb60d9
MD5 5604c65e7a48b707775581ba38ee0beb
SHA1 23d1bab3a39c979a39865902e3c16db24ac14d8f
SHA512 01db0d91bf8d90e4c53973766c5541673886eb26e9870ac192db50d4f4257817beea9d87016ca28e4646f411c922f8f66108b785ef7e176d50ca78d02085b341
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/app.lexpad.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 8ea0962a74368f90b942969689ea0a83d94aa5fb77f1bf3e32f8c6669582102d
MD5 dcb5a497bdeb451d0055451035557d9c
SHA1 8b7bda292f80665181ae9e358d8085532d6a9164
SHA512 2be74bb3c454da8d41362086423136e80a2ae2750a8bf297898b91beabf8a0123fa6236ad381c2a216dee47829be9291433a644e545ebfb08ffa64fe2ef25cf5
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.lexpad.android/primary.prof
Size 2KB
SHA256 158c3c5359da03e4b7665fae41ce95c8743b7686926507a01f2d01a3f5231994
MD5 8eff5e72650a718867d0a92e56916450
SHA1 2f77b230740babed5faac56d668ff2f629698efe
SHA512 272fd6c06c38b06244b1e8764b69277825e5520f5dcba7345ce03c73eb081660ac70f5c813dc67cd6e80c015fadaf34da8a5b5349fd68603f1457bfb7c1006ef
TLSH
T1E0513A0A9D40EE81A5E2AB41E828B40DC7D1DE8EAF42D831FA595F2B0407F5837E15CD
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads