6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c

Analysis

max time kernel
46s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
08/09/2026, 06:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c.apk
Size 4.6MB
Sample260908-hemeeade46
SHA256 6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c
MD5 9147e0e713076c4f276bfdabbe0b7360
SHA1 73b8e438c6be92843be9a955eaef3343dfdbd442
SHA512 c62d80bbc8434c8d3dadb089add372f7ec3f5841f88317370865859de721c7a1ccb0facad0e5d84619ec76a6115effa9af0ea1447ec2a5a43a650e3fd39d6ed4
SSDEEP 98304:q8eW1cyZAUsg3Mq3KSH+XBtmntgwQnaL130PO1Tt0rZM15:q84KFB8q3KY+RIgWhlr
TLSH
T11626E089F7589E2FC477503209AA5235525B4D12CE879B83A95C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5030

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 e217a8a08f7daee6daaa619b93b1514b024ca98e8151127dfb6467e79023f1d0
MD5 5be9f015540e98a19bd7a291b753f35f
SHA1 b4aa587006ef09cb17e5a43169c18eca17f5e96f
SHA512 ec66b2bed82c887c27a3eb14ccae7f121ff7e7bf1144b9df710c00d9cdd901f0055a6bd85db84912e6129291669f878d9f6b2f03391985800c32ae34c6f8b0c1
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 93ec350b70dc3e67438db4b02d91452b5327928b55eae47ef6c0ed3ba7d40e00
MD5 c2cad0a17191a7e6675de50a6166279c
SHA1 89d9dc68de8ba51f9d31a80bd53ce5aac847d5d6
SHA512 ad7c0b18e3fe7c0e6e1dded7a7ec717b1b935cd905a1f68f0827e135af1bdcaefd4ae021690dd88be0fc09d64c9b5b93ac251208dfe7a18082f65ba609daba20
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 8KB
SHA256 36c9247ae88ce2031870aeb00eed3236e6ec6e04137f2d0d6afc30075f784397
MD5 5c7b42f4f88b870829cf6bf38f59aa0b
SHA1 c3058dcde99fdd9d25380d429fc7ed6a3c1d56c8
SHA512 8e84c010c1717e24abd80d54366fccaa9a0852c19ddb4aa424bffc7c6a6cedd3db1afd8abb9c0a1dd8403b3d53c99041589a48fe0133b721b6584950f63b3032
SSDEEP 192:meJL7fP08iK7ZYQ+wwWSrNL3pEFcalwHfOVohKXtMNE:meJn3ZDfwNRdEWl/OV8E
TLSH
T14502BF1B72090AD86FC816B96A7170896D85ACC0BE460FD44BFCEF848B2D4EF02E1706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads