Analysis
- max time kernel
149s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
10/09/2026, 11:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app-release.apk
- Size 4.1MB
- Sample260910-m95lpabm2s
- SHA256 29c94133ded2ded6eae209fc0da65138f05d9a41f228de406d6a51b9c5224b71
- MD5 6236b81935aa9d2dfcd7a7d587dd077d
- SHA1 d0011e2ab8cb0c0c70031cd89694d474877ba823
- SHA512 8ef731f0d5584d9215945f556789c7eee22f326e415345495c34f59da68bbf75ebe07f21fc851058e7510444354237b92a28167850bd0ba3abef4b027088fb1f
- SSDEEP 98304:k+Aqd2Zrbd7KgMHM1wn4q8o0y++dCzyxkXi11V+97hXDMxD7t:k+A2a1wtywV1ID27t
- TLSH T10516E085B748A72FC477563385F65772528B4D0B8E83D6936828320C78B7AF41F5ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.librarymodules.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.librarymodules.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.librarymodules.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.librarymodules.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.librarymodules.app
Processes
-
com.librarymodules.app1⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4297 -
logcat -c2⤵PID:4323
-
-
logcat2⤵PID:4338
-