6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82

Analysis

max time kernel
4s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
22/09/2026, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82.apk
Size 3.0MB
Sample260922-qd4lasfa85
SHA256 6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82
MD5 e8b98578e3a24ee3e6caa8f511bab650
SHA1 f125dd4f995eced16fbea517fcd5717bbced051c
SHA512 c44bc0885debb4edbe9612dbbbdff2a8e8d4be0e808710fe26f6168c3a03c1074e7fbb3d7227e1c9af75c0d3fa5179ac254fab5de765799493562e3a8a32bfac
SSDEEP 49152:u9lNrENUn/4cGv8TXRTI3XXmn2TFaoz7U7nQmRP+CRMLuLi1FKbgf4Z0B0x1Q6Rz:u3NwNOfGSXO3XXDgoPpYnMLuu1Mj0B0L
TLSH
T1E9E53385A9F7FC24D6F24439E0C9E07B641E83365C0BF6371A51849FAAE6D091B0DED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lydia.route

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lydia.route

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.lydia.route

com.lydia.route
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4294

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation6949288497209707786tmp

Path /data/data/com.lydia.route/files/PersistedInstallation6949288497209707786tmp
Size 90B
SHA256 eda06c525999d19b3d30796bdc0fe3042608ab13a7340d29b6e29bfbb64d5f36
MD5 5ca1c5cc1c64f84b7025d5726f07b58a
SHA1 afd8871cfa1c49052fd0e55c29b4a857fa74d0d8
SHA512 9edebf0d76b6212062f5f5fc0f59a65a8d6f5610ef5565c9a8ffabda3d5024861ef057f9fd4169092410c3384055964fe0687f0eede775628f7ecd12e4c39355
TLSH
T143B0120157304191ECCAA2035F8ED1102ED024802809CF480A0C908240E32D482039A8
MD5 SHA1 SHA512 TLSH

Submit Download