3daebe6a14c834321096190593ddb9ab8988e7532baef29c7d206636c9adbdd7

Resubmissions

06/09/2026, 18:45

260906-xec83acg3910

06/09/2026, 12:20

260906-ph3zwsap3x10

Analysis

max time kernel
149s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/09/2026, 18:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
my-apk.apk
Size 4.4MB
Sample260906-xec83acg39
SHA256 3daebe6a14c834321096190593ddb9ab8988e7532baef29c7d206636c9adbdd7
MD5 370416134d3745be895119be16a4ca7b
SHA1 c100b6a4af0666ecc5a3ed064ec233da7ad3db4d
SHA512 a2403bdf834c6ec7b22d84ddc3ff686bca2b0eb599e20396e967eb15e84270cc3542993da93237d1f174fab97bb451757571935d90999bb9361ad92bf5aeb399
SSDEEP 98304:bK1klKax0Lk0bBN0LDmQ/mz3zBvTt0t4OLxu:bKmbx0H9qLDFuz5iHk
TLSH
T1E926F103FB44CA87D8BA83F66F270DA92A131F14CA03A7E74455366E2D771D14ED6A8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion execution persistence

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection defense_evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	build.ledear.apk

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	build.ledear.apk

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	build.ledear.apk

build.ledear.apk
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Schedules tasks to execute at a specified time
PID:4776

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

log-2026-09-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
Size 13B
SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
MD5 de2c41a51ee9246eb1708f65b511add0
SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
MD5 SHA1 SHA512

Submit Download

log-2026-09-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
Size 17B
SHA256 f39b183246ad562e3f03b0ca5264b7a6be874ae2777c586ff1c178ed1119031b
MD5 b102c4289970a0779534fb7bb071dbe0
SHA1 2df05eb55a682c4a1b244d4414281c84fa630eda
SHA512 f36f54ad45a6014faafa05cc1a00bc4e927babbae9cd634cc0cf63eaa3787fd94e9ca756bd5ac8570930cb96be1a0526ecef488635f34d18fd2a4426c695caf1
MD5 SHA1 SHA512

Submit Download

log-2026-09-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-06.txt
Size 25B
SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
MD5 bdb821a955117250611e94cd23842584
SHA1 81edcea1b44f94cfc140710c8410d0696b760c67
SHA512 e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads