Analysis

  • max time kernel
    2s
  • max time network
    155s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    20/09/2026, 00:21

General

  • Target
    VRTV.apk
  • Size 26.2MB
  • Sample260920-ankceazyhv
  • SHA256 f3ef3fe882ad9d60fa206a3547a6b1ffb0a0e71c308186b330371bdc0a3bd32c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 25 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • cxiw.bhmsxz.izhyxha
    1⤵
    • Loads dropped Dex/Jar
    PID:5022

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        i11111i111.zip

        • Path /data/data/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip
        • Size 1.5MB
        • SHA256 6279bc0884cc6bd3d5f9d4b99c370f964065beb1393cf0f97a8ffa36bfd69e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lib2a80863609dc72ed.so

        • Path /data/data/cxiw.bhmsxz.izhyxha/dpt-libs/x86_64/lib2a80863609dc72ed.so
        • Size 719KB
        • SHA256 66730a8587bb0a7adb43363ed5ec11499b3557c7c7c7d67c35b85a093e7d7a54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip
        • Size 61KB
        • SHA256 a9f0733b31d831bb9797b6ab8831bc2296f1bc42cdd813d5ce6bef5aa26abf2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes10.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes10.dex
        • Size 65KB
        • SHA256 083a8394f86e41f139801cd25126fb74e6d2ab1f3e291b1b8cb674071fe02417
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes11.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes11.dex
        • Size 53KB
        • SHA256 b1aa9e9069dbdc4a6e8b49672c6769d4b482442623472d2aef6cda55c1560f2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes12.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes12.dex
        • Size 67KB
        • SHA256 c6fe214a9deda506945318bed5fefd07351652218e2c014d13e49bc6f2126648
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes13.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes13.dex
        • Size 75KB
        • SHA256 1e87957a67a81744e238ac2f70d710648e771a83a60d7edbf23e2ee1576c45df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes14.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes14.dex
        • Size 69KB
        • SHA256 22d90323310c931d5b42ec3b15abe0a45915f12931d0ca68022de4d03f355453
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes15.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes15.dex
        • Size 62KB
        • SHA256 38a20dd29647b9f3c962cb0b5ae09e65cb01b758f5e766ba2831177dc1bc4a06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes16.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes16.dex
        • Size 49KB
        • SHA256 1db94d3f08d185c1b2827cdf168a2ae90ab2a21867cd514608f0f61b3d69ffcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes17.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes17.dex
        • Size 54KB
        • SHA256 85ee41f09cde91044b8ee99708f2a5993e1e6b2dcd67cd217468dfde5dbdf63e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes18.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes18.dex
        • Size 72KB
        • SHA256 bb90e9e586370f48c22396a8b63ad26f66a1979b15806401d9b7f3e01cd46dd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes19.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes19.dex
        • Size 57KB
        • SHA256 eec5cb83d879aef0c599e1056e9b62c7df46245201e8c8e1cbe7e76b1f26a497
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes2.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes2.dex
        • Size 75KB
        • SHA256 46d846b47f056b1bbe27ddd5becebf654e86db4b53aa84b353e8d7629b5218bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes20.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes20.dex
        • Size 61KB
        • SHA256 00086d1634ae314343a097e2a047d0c596957683828a28adedfa206ab4d0a22e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes21.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes21.dex
        • Size 60KB
        • SHA256 f81f84ee14430fec1621b33c30e5e4786472a35a354d46283b031bd07fe6a8e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes22.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes22.dex
        • Size 54KB
        • SHA256 6397ad3c8f5ac723d1b566cd5dec493cdaed18ed8b978a9da1119a414ac8a8a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes23.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes23.dex
        • Size 58KB
        • SHA256 3be3a68426e4e87c40ac8e66b0eadec484a5eaa3041ff1762b727d20a980b41c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes24.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes24.dex
        • Size 77KB
        • SHA256 7c31d6d33efcda847a75c767669855b141c964cfc5536d2e9f9ce8249c5d25f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes25.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes25.dex
        • Size 19KB
        • SHA256 98735decfe153589f919c47fcc0bf21e079fe4bb09d944c5fbe2bd0445c52061
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes3.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes3.dex
        • Size 62KB
        • SHA256 1e887975d23a833c80b3fcc462dcd462efcf7ed19db114a1f3ce83eb0eb14c8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes4.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes4.dex
        • Size 80KB
        • SHA256 c0111a3340593c8a90b8fc4484453bf07fa43a94558ce800705e17c3d7597b51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes5.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes5.dex
        • Size 53KB
        • SHA256 4f2b08617bb7ed049bfb41feece7d38daf7c0d7b6cebd18599b793afdda277ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes6.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes6.dex
        • Size 63KB
        • SHA256 7d95129cadfe5279c84b33f91f05b1d42502dd2d0f0b66465ad2eceea77a14d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes7.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes7.dex
        • Size 50KB
        • SHA256 917695c05279616f507aaab6f9e958c35773a24e6470220c915aac24161dd8e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes8.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes8.dex
        • Size 80KB
        • SHA256 cbf0fdffb3141e32f672c516d0f84c1a0a6bc37d5aa2a001271884ecd2a46d89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        i11111i111.zip!classes9.dex

        • Path /data/user/0/cxiw.bhmsxz.izhyxha/code_cache/i11111i111.zip!classes9.dex
        • Size 58KB
        • SHA256 166d25e4bfbad2179ab7bcdf93d041e73168cdc5523f620e64be8871c4eafff8
        • MD5 SHA1 SHA512 SSDEEP TLSH