Analysis
- max time kernel
6s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
07/09/2026, 11:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
rama567.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
rama567.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
rama567.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target rama567.apk
- Size 5.2MB
- Sample260907-nblxcsvgrb
- SHA256 1bfb21514a5d3d8b20f244aa1a2c1719f9768e20e413d096f6dcb59dea0a16f1
- MD5 693ea77d781a30ff49fbb11983515e41
- SHA1 3b631e318ef6d8ded5eec23acc2b99b9e0b6aae3
- SHA512 cfb0c519e173340c732e7a15d96d18315421b39c2b2ae362b21d147041625156bf0828c1e71f2ec6300541119c428c3a18b2f064e98fcf9f45ad1f1087d42384
- SSDEEP 98304:T651IjPodZVffGCswHCKQfQ8trQtBR32L:+5D3xswHCfIy0yL
- TLSH T1BF46BF46AB267E6AC8BE423595BA435033315E019F4397476008B7BCECB36DE1F8A7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.rama567user.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rama567user.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rama567user.app/files/PersistedInstallation2793675049420219558tmp
- Size 90B
- SHA256 012e6df5e8108647dc188bcfdecbae534bdf95af8b7177161c2b4205ed9cd24e
- MD5 5234dda77f4276244cf370dbb4de30ca
- SHA1 d1e17166af1e88299933243eac8595f409ff19fb
- SHA512 74bd368eb7229eb5b8d829c21b5ddb1cb900dc646607b55cb47d2922d3161bc6154ce3d710290c6e486f77126c1b435d199fd3af8a77d0a9ef881e3f293244d7
- TLSH T152B01242A6B0515788C7E3033E4CD1042ED02441084A8E549F08D54040811D4F6139A4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.rama567user.app/files/PersistedInstallation6788211400404263676tmp
- Size 570B
- SHA256 41b53b6cb39a6fff5e52f7b40c3e5406d9f8092e6b26e305aa62a66fa23124db
- MD5 837bfb2a73f2e5f17124418cec7b398e
- SHA1 71d2fba11ff725cc4b9e7a3175a7b6a6ee1a9125
- SHA512 10fce36c9e990ddd3a0a300190987be2af3c0ff46c21b6d7887218c607f6299aed7e0328daae0d1ac34cdbc6fb70d777a6244b9847f623b43cf6bdd8c6927e28
- TLSH T191F0960554F40D0EC8E6F003AE8C4C882E252570175D80E4FFC249F054509C7F207E0D
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.rama567user.app/files/profileInstalled
- Size 24B
- SHA256 9f40d8768a001d2a8949fc130e5d8ba334cc187bb1dc6311535408a34c34043e
- MD5 f038824b3ce229835e1453bbfac0ea77
- SHA1 6b48f71db056ea3ddff78848ac35aa502df0ce0b
- SHA512 1c56965df98ddda53baf64f5b293f92a1e07d421c2cf0cf1bc861eb87227ceada3bdd0980f05e6ad6ab683285b942d3a9faaa89074135de2dfd740124159da16
- MD5 SHA1 SHA512
- Path /data/data/com.rama567user.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d38bf8f23e7c1bda1f33ada4958ebae13be39ab5b8dfdd99333d577f80a80674
- MD5 7667e12d23901ccb1e7fb85636594802
- SHA1 7a66c4eea0c165424f113c3c260eedea6812ff3e
- SHA512 57fa082ffa7ab06ee3469996676ecb1f439d4bc532c426a52dfaded66df83aa8ed22c29a3382f8d831e234417dc184f85f8b8e814e02112400121e8327c512b6
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.rama567user.app/primary.prof
- Size 1KB
- SHA256 6612b54d958ec559490e40157f68b9b2c40b2aa7fa73c908f2c292225441ec88
- MD5 5efd0218ec81b60e9715823b352390e1
- SHA1 b037df4c05e6e4ba9d388473182795266cd37abb
- SHA512 0d23a3e39d82496ba915656f817813d560d50ec1f947a0ab8c5837b34c8a17f60e72945f2125758f247115739451cc5948cd1e8c1183ce8b539f29c2035f28ed
- TLSH T1A9410858898203C424D5629B6EEF2C32158A008CC823278698ED72C16299B173277B97
- MD5 SHA1 SHA512 TLSH