bcbbcd9f955d5ce91cf14aa4d6dc94a83f588951ac0f90c9390c3b9c63a25bbd

Analysis

max time kernel
6s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/09/2026, 21:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
orbio-android.apk
Size 1.9MB
Sample260910-zz4b4aytcw
SHA256 bcbbcd9f955d5ce91cf14aa4d6dc94a83f588951ac0f90c9390c3b9c63a25bbd
MD5 78600fc6f216d1c1e7d623996cb803d8
SHA1 fb82c5503ccbd323c91d616af8c68214898bdb16
SHA512 f5ccff5fdc24e4f511b4f26aed4592be7c03796f725cbeb94ad8c4564cdf6429398046424d76fc87bac0bbef3f52d1913930a3b24a2bcd13f0d7645d7262c5c4
SSDEEP 49152:hy3J2j2aFaaHWmn9Aw3P5BIL2sy3d0dQJ:g5C2kUuAw8L2XydI
TLSH
T13E950242FB68AA1FC833C172294613356552AC26CB53D687F95837BD38B76E84F463C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	za.co.orbio.itsm

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	za.co.orbio.itsm

za.co.orbio.itsm
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4833

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation1860022793153687739tmp

Path /data/data/za.co.orbio.itsm/files/PersistedInstallation1860022793153687739tmp
Size 90B
SHA256 bf0fd2c9ae2099d42e5df7274aff05f49526e166a2d6a3662aa4af4ab40116a5
MD5 b180605dbb2b91aac84f11fbecaf02d2
SHA1 4a62ca3a4b502f5a41ea7ac6f35aad2f796ae8c9
SHA512 99e6861b41cb53621e899a371112e62813a4d143a1524c63be4433f8998aa722164ebd5b16b5d37e9e15443be50338436f71b71009c5b45ca21cd6fb03bd237d
TLSH
T15EB01204CA7045418597E7132C9CE3005D503481284ACE694A08B86004925E5C1539B4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation2201566961258159539tmp

Path /data/data/za.co.orbio.itsm/files/PersistedInstallation2201566961258159539tmp
Size 565B
SHA256 b910fcf13f54b8d20920188662629c62c9ae093a07ccaa54b31a81e1370b5618
MD5 9916d38cd1a8607cf34bdfbf488f1a67
SHA1 8280a419e1def37d9bfe9e3ab5ae837e37e188a4
SHA512 1f8d4d423345a652ac9a488ae3bce0becab23ce6047004be6b6f57674d087b58e282669ea6d44b0ace4e87c46ed59ded0925342160de8779e0e067833457cddf
TLSH
T1E4F0E14AA7B00249841F7793065C7F4D0C145BD9641D55E27AE5B87196A98EFC137C14
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/za.co.orbio.itsm/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9899809507a7c9a09ecd3fca5153fbe97e19c319fd2e04cd72ce4f7ef94980fe
MD5 9d7f2c918b32c6da99ba0e9be442294a
SHA1 643e47980baa57e74c880737a3fde01467f5cd20
SHA512 518c13be44a90439e2bd2d05577147c75393b2a6921d130026acae8504e95013448d5834e4bc5b240b40e4cc197eefe2eac93e2766678a6ac0a7875952696b8f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/za.co.orbio.itsm/primary.prof
Size 4KB
SHA256 d15de8e5e75530947fb96caa522452896a61853d1009318bd20b27b11144412f
MD5 cba20720a2777e69f4d5425a4dc12b5f
SHA1 2474f38630d226edc66c18bce82ba6377fa12e7a
SHA512 23cda5c163b1a5d31b74823a33efcbce20936ff4da3b80bd73c66b22dfec710fcc49da23db12dc143614c6c36846c5ef1155a78dc8011e866fd7981b37b99f67
SSDEEP 96:VyVTTxaWlzFJd6t03ppmAr7oEOmVIx0ILWb38CnCxNGqQyyUQsX9J:kTxfhJd6EDmAf5imaWb38yqQyyw/
TLSH
T1DAA15BE34BD427ABC08AA4324EC56080861EE19E73AB462A75637FE70F01214ADD136B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads