Analysis
- max time kernel
50s - max time network
154s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/09/2026, 17:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
61af149986db26f8e4d084e994cf43bc2595ed7668393401cef7a15afa999b57.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
61af149986db26f8e4d084e994cf43bc2595ed7668393401cef7a15afa999b57.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
61af149986db26f8e4d084e994cf43bc2595ed7668393401cef7a15afa999b57.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 61af149986db26f8e4d084e994cf43bc2595ed7668393401cef7a15afa999b57.apk
- Size 11.7MB
- Sample260908-wfgr7swcrd
- SHA256 61af149986db26f8e4d084e994cf43bc2595ed7668393401cef7a15afa999b57
- MD5 5211d927bcb68146635773b50653fad5
- SHA1 b99f803a41321d0453c54890306d0962fd3bf856
- SHA512 6912ea9196e2cb8d6b72beca80bf59397764335418b35a3619a8ad3eaa201360becdf70c201d5f2ee233a9c3a017ae03f1a29084978a0e480eea12ba855fd902
- SSDEEP 196608:pumbGH3c7oAXcdxm5TH9FfJr7ix7B8o+Kge0k91PRwnZ03LYmcwJYK4:pZ+zAaxmdH9FfJr7i1Oo1PRwZ03bcmY9
- TLSH T13AC61296F7C5986BC4F75332417A5272528B4D228B93C6D3AE04723C68B79D40F8EBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.Sam.RtoEchallan - Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.Sam.RtoEchallan
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.Sam.RtoEchallan/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.Sam.RtoEchallan/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 2e3a76eafa4e8b39a129874fcf9f7e7bdc558ddfd0226f15464cc95210a5a216
- MD5 9634e8e8ae69b74bd1e64d6072b922b9
- SHA1 2a89b7e77fde732375f468d525f85033df753f8f
- SHA512 f28cb7f6e5c8dea6844b67748b768f55420acd5f97923576c97fbec0769d584dcd7172a5585500cbb082095e7bd5452dfc8c2f5f7b277b1e63c6eeaf873db97e
- MD5 SHA1 SHA512
- Path /data/user/0/com.Sam.RtoEchallan/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.Sam.RtoEchallan/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 0b90cb701952ed6f5e26994c53813790e7473fe4c2dff81058e9e1135f26396c
- MD5 8b70c99085938789502d16326e0e89d1
- SHA1 0e70d913728464fe5e4c3568692449dcd09d747d
- SHA512 1c5cf315a239ff65036ab864082d46109e40e68450de7d2bd60be90e552be317f6a77382ed2ad056e7607c1eb7330332e5a3cf84547c36042e8ea25c10a6cdc6
- SSDEEP 6:KSPvsP9g9FZde/kPlOERX4PBX4ogLugMBX4suuK+/6NYTogdI4Ow2:KAsFqzdeWRmBEyPbP/3owOw2
- TLSH T1F472C27C93849F23D0381372A099C3081F761618B323C7EB25510E2B2C437CCA55CD48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.Sam.RtoEchallan/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 3e288ac71b270905d89d767a1ead6447a58ca093fe48881ce483ee0bdc560e3f
- MD5 50d495b8e7c4127c73cdb1b5a2f6dc7d
- SHA1 b7a069585934a7de3b0091acc7e0879bed16dc77
- SHA512 b2a6d7caedc85ac14cac068bff9300a8aa9d93378a17e0a71cb33ed9aa0307fc7f8824deca4586882e493109b9862b8c96c963f33d94ccfcdae3f18b152c5432
- SSDEEP 96:0UdOwuLW/DP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:dowuLundjnHt9S/f8JzSV+6D86T0ED
- TLSH T188B3F09D0F5D6900C0B964B0A5E00BA17E3E412EA793E3E16591057AADD3921DE2DCFA
- MD5 SHA1 SHA512 SSDEEP TLSH