1c120e01750ea8f70a8cb8b31dcc9960e243b368d2a1fb68808176280e5f62f9

Analysis

max time kernel
6s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/09/2026, 09:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_1c120e01750ea8f70a8cb8b31dcc9960e243b368d2a1fb68808176280e5f62f9.apk
Size 2.3MB
Sample260910-lr6wcs1eqc
SHA256 1c120e01750ea8f70a8cb8b31dcc9960e243b368d2a1fb68808176280e5f62f9
MD5 0f45ed49ddc69098e76183e3f83641b6
SHA1 b1b44f10f49d681683b4a338204194c86963b314
SHA512 6d2685722d83ba59f206eba4e8eb50c6b80007ebe297f821ea65b955a0b6d13f7599fc64c7b31fc6a7c4d3681fec394748f3ac6f5e501b3d6cd46e25f0b55ab4
SSDEEP 49152:U7Y4hNgo4zITHvo91hLMRThHNwvez1x/z17H4d93xN5N/z+v3dMzevL91N:U7Y4hNgNzfARThuezbF2x1zs1N
TLSH
T135B5E045BB988F1EC87791360D4A9632640AEC27C703C387D9B42B5D28AF6F44F167E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.android.hzym9ar

com.android.hzym9ar
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:4779

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.android.hzym9ar/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 673345146a15fd982a5fe597383339187bd859149d28d0ae4ce8001cb2d1e543
MD5 65d0344645b02d78f387754804009231
SHA1 94b1c82fbb47d2358ef7b6abdd14e418a36a1459
SHA512 1cc26c3275dd251bd8272afb0a35c600d55636c9fbb27dd6e77ace7a96618d096e5cee3a3fe5ff904271a145bea828c30fe5693d08a0caa8b944186ec5e8b73f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.android.hzym9ar/primary.prof
Size 2KB
SHA256 c7424c7f9cb53797a4115fec7c086dfe36ff1bfa4723dc6088811f5a8a88c0c1
MD5 47adee5115765c05d81758e061357220
SHA1 7bd19c2c8d1aff69b470c76828b1b323781fb7af
SHA512 e8b961c86701351b42f48d402bdcd83cf68c6f65b23d734c00a215339b8a2b390d4b3acb1e89fe700e5a6fcb2364d550076d05d6ec4552730a99425eb562a828
TLSH
T1B3515E95B8AD517104FD41402CCA72D3245D085788C49DDFDA7BE67E39E4134E6E30A3
MD5 SHA1 SHA512 TLSH