Analysis
- max time kernel
1049s - max time network
987s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
13/09/2026, 11:35
Behavioral task
behavioral1
Sample
Neax Client.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Neax Client.apk
- Size 7.4MB
- Sample260913-np33ssfr4t
- SHA256 9bf3150367e7bcd4e829670705418dd193db024ef7c18bab17c257da67661253
- MD5 a5f8dd581fb1edf3c66d5d6360446d05
- SHA1 5684a92ae1b65d4bcac30ac5cd5b4c59766a4389
- SHA512 a157a3aa5d96809f5ad136d444c2b33cf7ef04d6ea7f3f171726b87bc02a78ed55f51d5ba67f265ef21f910f491897b8571cf729201f5c39653a7cd18196d198
- SSDEEP 196608:tnrChRHprZTux8kUz0Ac+9KbZSONAc+9KbZqw:tnehZdZ28kkbdEzGdEqw
- TLSH T1E8761203FB49DB9BD8AA83F26F230DA919171F15C603A6D704513AAD2DB71C10ED9B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.found.fundraising - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.found.fundraising - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.found.fundraising - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.found.fundraising
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-13.txt
- Size 13B
- SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
- MD5 de2c41a51ee9246eb1708f65b511add0
- SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
- SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-13.txt
- Size 29B
- SHA256 6daee362033a88db7a0a44e2d5cf9bb84009bcaa5cb64df03b1b54ab1268a689
- MD5 a3e87562b4dc206d339f214da3b6b78d
- SHA1 15175e0d3a79b88d3c13549e0286886ab5bf840c
- SHA512 44a797f3b5fb0149afd4228729098485691946d89916bfbfb7e384eb4176f5bbf6543ffb9a97da220960236805ca3aa9975275681963c46dd2c3ec0eb0c36fb2
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-09-13.txt
- Size 25B
- SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
- MD5 bdb821a955117250611e94cd23842584
- SHA1 81edcea1b44f94cfc140710c8410d0696b760c67
- SHA512 e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
- MD5 SHA1 SHA512