Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    07/09/2026, 12:36

General

  • Target
    1win-agent.apk
  • Size 9.0MB
  • Sample260907-pterfavwbs
  • SHA256 d5ad0e81226591eed3db70488553b6c76bf67bc338cb1982c496622e71f3eeb4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • win.sunpay.lol
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4260

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        app.log

        • Path /data/data/win.sunpay.lol/cache/debug-logs/app.log
        • Size 310B
        • SHA256 e4382088282fb98a6923cecf2c5dca2f9f9e02c68e1da00d6e6295d53c50791a
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/win.sunpay.lol/files/profileInstalled
        • Size 24B
        • SHA256 00cccbdc7a73b0f732a8207e877e33e317bcf6c966f2a35d22b15ac624d199bd
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 fd9010259d392dfc96da233838836ae74327ba433f79993dce74bbc97cdae7f2
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 c10a96c28c9b3632b68e57843901aabe8d99d61ad7b29ecb9ded52d56caa0ac5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 9a168f7ae8ac6577abb46d39ed16a858cd04e39ca5aa2be712849c33b5e4d8c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/win.sunpay.lol/no_backup/androidx.work.workdb-wal
        • Size 124KB
        • SHA256 fc132818d83a37013f7db9bfb92563c148caeca30d68c979d0ce4af702c48d80
        • MD5 SHA1 SHA512 SSDEEP TLSH