1bfb21514a5d3d8b20f244aa1a2c1719f9768e20e413d096f6dcb59dea0a16f1

Analysis

max time kernel
7s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/09/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rama567.apk
Size 5.2MB
Sample260907-nblxcsvgrb
SHA256 1bfb21514a5d3d8b20f244aa1a2c1719f9768e20e413d096f6dcb59dea0a16f1
MD5 693ea77d781a30ff49fbb11983515e41
SHA1 3b631e318ef6d8ded5eec23acc2b99b9e0b6aae3
SHA512 cfb0c519e173340c732e7a15d96d18315421b39c2b2ae362b21d147041625156bf0828c1e71f2ec6300541119c428c3a18b2f064e98fcf9f45ad1f1087d42384
SSDEEP 98304:T651IjPodZVffGCswHCKQfQ8trQtBR32L:+5D3xswHCfIy0yL
TLSH
T1BF46BF46AB267E6AC8BE423595BA435033315E019F4397476008B7BCECB36DE1F8A7C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.rama567user.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rama567user.app

com.rama567user.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4834

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation3340647234660834515tmp

Path /data/data/com.rama567user.app/files/PersistedInstallation3340647234660834515tmp
Size 90B
SHA256 6eb2fdce45781e5da2f2431b585a13e6be34d85e77873771cc8431574631eb89
MD5 7b040bd480c778dbccb54c5d6c10c858
SHA1 a4b679b2ab6ec440a269d46131f72e9208093a21
SHA512 5b55bd896b40cd6c1b45e4e8de933c5975c74584c31aa0f338ef4366db8ca6e12f8d1496ab68755cccfe0de8a2a661485a4b438b47199b8c152b742a93833248
TLSH
T152B012214B314141C9D6A2061CCEA2002DC8148168098A66DA0A904181C12E9C103DD4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation4589448651101534555tmp

Path /data/data/com.rama567user.app/files/PersistedInstallation4589448651101534555tmp
Size 566B
SHA256 dc0068249100fa0d8ec65cdec1f289b0f1ce5fbfbb7d25fcdce49f43816a7e77
MD5 ee523ca1eb5d8eb66de67f7cbebd6633
SHA1 a74aa86ecc1cb1b16f70d635b1bc7cd9df1a3ad4
SHA512 f3b50e1b54ffac9a99bd177893c7369c16f93ef666648990004cde1b2d619afa1be3245c52e4f819ee161f7036a0617adcdfd6adb6a872c39745be97dee70a66
TLSH
T1C4F0E12B0D610419CAA6620311C99C132DAC1575170945F9FE0E047181C9AAFE10B849
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.rama567user.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 b60d963e65fc62f18a79bb9a181b5602c58cfdd57aa5247f899bec47bafa51f0
MD5 d5dab0b8b951796edbad0f2ba2f85352
SHA1 7c774c4e2a5b4e474802cdc09f615f50c0eddc2f
SHA512 2eb386f4c55b6d21607cbb6ce10b02e05c064d0615f5d902cb27d331f7993bbd2fffb2f8f0ba534acc180a0cfb1770f490a7ff66975a80cc8eea19c141a46c80
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.rama567user.app/primary.prof
Size 1KB
SHA256 6612b54d958ec559490e40157f68b9b2c40b2aa7fa73c908f2c292225441ec88
MD5 5efd0218ec81b60e9715823b352390e1
SHA1 b037df4c05e6e4ba9d388473182795266cd37abb
SHA512 0d23a3e39d82496ba915656f817813d560d50ec1f947a0ab8c5837b34c8a17f60e72945f2125758f247115739451cc5948cd1e8c1183ce8b539f29c2035f28ed
TLSH
T1A9410858898203C424D5629B6EEF2C32158A008CC823278698ED72C16299B173277B97
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads