Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    12/09/2026, 00:44

General

  • Target
    jaffacakes118_5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14.apk
  • Size 9.1MB
  • Sample260912-a3vrpaywcy
  • SHA256 5f694603f54ab3c2d5bee849422f65894811973c888897c6e7c222ee200f5f14
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.zzn.trqwdmdp
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Checks CPU information
    • Checks memory information
    PID:4907

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation2324470057763291973tmp

        • Path /data/user/0/com.zzn.trqwdmdp/files/PersistedInstallation2324470057763291973tmp
        • Size 90B
        • SHA256 739e7cc4acce4d0ee8e122c6e4aa6f1e1df339cf21cda4879d1390c23274beaf
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2906963341654081299tmp

        • Path /data/user/0/com.zzn.trqwdmdp/files/PersistedInstallation2906963341654081299tmp
        • Size 114B
        • SHA256 622533af94e32082804adeb8bd94c534f39ec24d7b81a3f4fdc5ab957f28ea28
        • MD5 SHA1 SHA512 TLSH