6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82

Analysis

max time kernel
4s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
22/09/2026, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82.apk
Size 3.0MB
Sample260922-qd4lasfa85
SHA256 6b43b4e65a9174612a62c66071637505e0e85424a595ea5379f42e9937c88f82
MD5 e8b98578e3a24ee3e6caa8f511bab650
SHA1 f125dd4f995eced16fbea517fcd5717bbced051c
SHA512 c44bc0885debb4edbe9612dbbbdff2a8e8d4be0e808710fe26f6168c3a03c1074e7fbb3d7227e1c9af75c0d3fa5179ac254fab5de765799493562e3a8a32bfac
SSDEEP 49152:u9lNrENUn/4cGv8TXRTI3XXmn2TFaoz7U7nQmRP+CRMLuLi1FKbgf4Z0B0x1Q6Rz:u3NwNOfGSXO3XXDgoPpYnMLuu1Mj0B0L
TLSH
T1E9E53385A9F7FC24D6F24439E0C9E07B641E83365C0BF6371A51849FAAE6D091B0DED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lydia.route

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lydia.route

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.lydia.route

com.lydia.route
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:5083

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation3958292560751443456tmp

Path /data/data/com.lydia.route/files/PersistedInstallation3958292560751443456tmp
Size 90B
SHA256 12f1888c8777015741bce6bb1bf02b75cd733cedb32ed054e117773572e941b2
MD5 f96116fc4b7a77615d70d6b49ba0ca21
SHA1 060aae53b82d26f93f6db0b678cecee3daa29ee7
SHA512 f4a57b5d81581763e1b0f12bb34534262549dc5ce212bbdb62aa9e45ab94c33488cf72215a0c8c1c14fc429cd7ebdf4d5ae5e6a76a1d7db68c7970b87d7c7d30
TLSH
T1F5B012418B304251FB86E6032DCEA5001DD01444140DCE140F08A49001D21D5C103AD4
MD5 SHA1 SHA512 TLSH

Submit Download