Resubmissions

10/09/2026, 21:19

260910-z6csqawfle7

10/09/2026, 21:13

260910-z2sy5sytdw7

Analysis

  • user interaction
    yes
  • max time kernel
    102s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    10/09/2026, 21:13

General

  • Target
    CNT 5G.apk
  • Size 4.6MB
  • Sample260910-z2sy5sytdw
  • SHA256 34476a8cf1a2d95cb5f34a130b2228df4f8b41459d30f05410c24ac03b4d3df6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Looks up external IP address via web service 1 TTPs 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • jayopr.mqodhvq
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5066

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tmdo.bin

        • Path /data/data/jayopr.mqodhvq/app_kqe/tmdo.bin
        • Size 50KB
        • SHA256 3746b41ac1f4edbec99c3b4e1e7a5f52d9e404de63554e7d576a232fcdb32455
        • MD5 SHA1 SHA512 SSDEEP TLSH