385453ac19062be1f451b466949043963eb5756e7327cce1676a2c3024a9c602

Analysis

max time kernel
6s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/09/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.apk
Size 12.1MB
Sample260906-wthxesel7z
SHA256 385453ac19062be1f451b466949043963eb5756e7327cce1676a2c3024a9c602
MD5 fb30d626b7262c6831aec0244aa95b6a
SHA1 85591ea5294b74e93510e9a1ef12fef8312b022c
SHA512 f011a6936d23ae7451bdfeb03bfa0c90694fcacb4ed09d29b4e360d7d0d9834899bfae72647660c809e8bc99e22d8a8e938ba6839aa305b878cad92b5d1503bb
SSDEEP 393216:1HtKH7JK6hTfKLPWr480i3qurFAMoCoA0uN:1NKH7tLfd6u+MoCorS
TLSH
T17FD612C7F7A89A2EC87740F24C5E567122675C22CA439B47AC58375C3873AE82F497D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker defense_evasion discovery execution

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fluxserver.vizumitvapp

Checks the presence of a debugger
defense_evasion
Starts a process using built-in Unix shell 1 TTPs
Android's native Unix shell environment acts as an interpreter to execute scripting commands outside the standard runtime environment.
execution

Unix Shell
T1623.001

com.fluxserver.vizumitvapp
1⤵
- Queries information about active data network
PID:4813
- /system/bin/sh /system/bin/pm list packages
  2⤵
  PID:4878
- - cmd package list packages
    3⤵
    PID:4896

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Command and Scripting Interpreter

T1623

Unix Shell

T1623.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.fluxserver.vizumitvapp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a1e9dc736c9bb8dac86374ce90cc0e593823f6be5d0c4cb761b15cf3bbf58e9b
MD5 4e66d610d85eb838a18b446d55968ae7
SHA1 0c1418c768c05bba0639cc99acff762b38d988a8
SHA512 dec8609cbd04e95f09ed50a6256e35a7f205252d94c288cd3dc90abadff4403e7ad92f521de4bb8e2ad0eb6da1ce9e4f4541def6cb53316cb12200d0700d1033
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.fluxserver.vizumitvapp/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.fluxserver.vizumitvapp/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 27ab5dee5f894e947551de63654358e18d07f456b19ad3bd04c510294ea4fb3e
MD5 35c69af1b15e705e217527e7bd642bb8
SHA1 1844ddaa1daad7b37e9f2257ff5577eadf437d95
SHA512 7da6327ebf8aecca61bb3dab1b4d086895cfc496c32095bf1103fc7301585470aec2daa2542730f4d325f5d785379ae9e4948624a1aaca30032f842818a33309
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.fluxserver.vizumitvapp/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.fluxserver.vizumitvapp/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 2609b56a1ccc57841538bdad6705249f82115bcd647e9ba7eb3dba3b13c0784c
MD5 49dc618474d93f6b3c8ae3dff1b26661
SHA1 f54681b95b12ca0a717c94458a870eaaef3e3f5d
SHA512 c481ee11bb8bc3b0d3ae9aff9d3c5b26c8f54d4c81a8de7c658860b2a73279f25f19825c9aac1c976e96ce45de7f79216f2113c80145513c66e3e4f460413174
SSDEEP 6:KX+RDj+8u9FZde/kPlOERX4PBX4ogLugMBX4suuK+/R+V8wJyzwJy8/iOw2:KgQzdeWRmBEyPbP/cLwOw2
TLSH
T1F472C27897C10953E109533A6CC5C37A1E6F6FAF5762C70717420E2E6C437886890D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.fluxserver.vizumitvapp/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 e5f4f3c68b63a8269260c45f332843f5240de37eda390d9815d3415b7b10844e
MD5 9572ffacd90378fe0f4a9ebb1fc36beb
SHA1 99070e39d0faec56270bf2def6466ac07ad4793b
SHA512 cdbfa5ea9dff98e158f3ba8df824b08fc2b4ed03930387e9ab418f7ccf2abde6627cd983071d273f7d812d8946b1b29e3320afc645cca4f70b5abd41f41939cf
SSDEEP 96:76+hdjnHtDRMpf8UzS6+BD8q0ExPp6cKM9:7djnHt9Mpf8UzS6+BD8q0E5p39
TLSH
T1B4B3225E0F992540C49994F4A9900FF27A3F462E8393E3E366910579ADC3920DD69CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.fluxserver.vizumitvapp/primary.prof
Size 3KB
SHA256 20b3bf20cc8f48d0fc85f9a26d4ff34b8947b84d89480c9421b5af4b7c4ea118
MD5 f4efce56361b3bdfef8cfc9b015ef3b2
SHA1 a15a141c8809a0697045892bf30eeab67f16c547
SHA512 54a5ee7e48ffcf85b3fa0bbe1c89f7349a18f7a27d0c34fdd2feece009146554c9f8c86360a0a447c86891ee5a6893fa42917d0f7c527f688494edaf3f9b95d2
TLSH
T18F816D0D22EF0C989821C7A391FE42D0927951278D09683BEE667D061DCFBCB1550AE3
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads