Analysis
- max time kernel
7s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/09/2026, 11:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
rama567.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
rama567.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
rama567.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target rama567.apk
- Size 5.2MB
- Sample260907-nblxcsvgrb
- SHA256 1bfb21514a5d3d8b20f244aa1a2c1719f9768e20e413d096f6dcb59dea0a16f1
- MD5 693ea77d781a30ff49fbb11983515e41
- SHA1 3b631e318ef6d8ded5eec23acc2b99b9e0b6aae3
- SHA512 cfb0c519e173340c732e7a15d96d18315421b39c2b2ae362b21d147041625156bf0828c1e71f2ec6300541119c428c3a18b2f064e98fcf9f45ad1f1087d42384
- SSDEEP 98304:T651IjPodZVffGCswHCKQfQ8trQtBR32L:+5D3xswHCfIy0yL
- TLSH T1BF46BF46AB267E6AC8BE423595BA435033315E019F4397476008B7BCECB36DE1F8A7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.rama567user.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rama567user.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rama567user.app/files/PersistedInstallation3560427601264071353tmp
- Size 90B
- SHA256 2939b9d1c392b599c5f8f4bdc24762941f99dfbe8dbe9e479bf0e30181bf02c3
- MD5 fb968b3d587b35569d33c102bf784ff8
- SHA1 ba714c8f45a576f0b49cbf24ce9d7a93e592d041
- SHA512 3ed24298716d73383c7a60fab167c65747c9fb06ffe2e32590b73fcf0ad4c7db50118860f1556a644698a0a49e0acac2d8e54fcdf9ab1861ae84c9abccae04d5
- TLSH T15AB0120147B041428485E6021D4CE1742FE129C1180A8F840A08949045821D2A1139AC
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.rama567user.app/files/PersistedInstallation5545279336222661784tmp
- Size 569B
- SHA256 da7daf5a65b7a10c99b47718470afa04c1a1d020d84b991564ede3b74991f945
- MD5 998efd520eabace8bcdae4bc90c3e1d6
- SHA1 538a08a9a31512785e937c93e2a0916276765d9c
- SHA512 a3208a6183d19b1dc45b7e87cbc19e1069f72b011688a3c2a74238eac684ef2d6162aae1c53b33c35d5556291955a8321165cf56e82eaf7426663873fe1219bc
- TLSH T163F0EB052D310516C8EAF6427A4CEE075A6C5EF4368B06D4EACD48D0165277BE60FC0D
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.rama567user.app/files/profileInstalled
- Size 24B
- SHA256 8f2e3f715b71847a9907eba41a10777844b0c1f6095bc8cb79acd6eb3d0134c7
- MD5 232949fef4c93f514412eebc4650c559
- SHA1 2a272d34b12d751561347ec8690b9c58760f37a0
- SHA512 cc16fe5b035aaa381e69d3b1969be3089697807d4088764414bffb92f6fcb52ad09f74ce1175171045221d14cd4bcbde6c2252be32931e572bc6caf534ba75e1
- MD5 SHA1 SHA512
- Path /data/data/com.rama567user.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0d1fe768171dca1673ac1183d6771bc5db67bcbe888ba4c5bb7b5dea4d130a77
- MD5 60341e4461f1ff61cfc419a9fec9598e
- SHA1 c83e6809dc7b999406573c895872d8fee11b1d6f
- SHA512 243203ab836db0fe7abf074e8dd801827f70c8c5d182a0a1a24619bf51e99fd25e0a1e2274335a4fa340d7a584ab88b4c18d6ebbf011eb50cb5d347606823ef8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.rama567user.app/primary.prof
- Size 1KB
- SHA256 6612b54d958ec559490e40157f68b9b2c40b2aa7fa73c908f2c292225441ec88
- MD5 5efd0218ec81b60e9715823b352390e1
- SHA1 b037df4c05e6e4ba9d388473182795266cd37abb
- SHA512 0d23a3e39d82496ba915656f817813d560d50ec1f947a0ab8c5837b34c8a17f60e72945f2125758f247115739451cc5948cd1e8c1183ce8b539f29c2035f28ed
- TLSH T1A9410858898203C424D5629B6EEF2C32158A008CC823278698ED72C16299B173277B97
- MD5 SHA1 SHA512 TLSH