Analysis

  • max time kernel
    7s
  • max time network
    157s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    22/09/2026, 14:28

General

  • Target
    test.apk
  • Size 23.4MB
  • Sample260922-rtcm7asv2k
  • SHA256 7f952e64693af54d117cab087984e489d8b7f6a8d94130dcf90858820bf2b3c0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Checks Qemu related system properties. 1 TTPs 1 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Loads dropped Dex/Jar 1 TTPs 10 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.wzrrvcr.ohmdakbnbkj
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Loads dropped Dex/Jar
    PID:4872

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libjiaguv1.so

        • Path /data/data/com.wzrrvcr.ohmdakbnbkj/.jiagu/libjiaguv1.so
        • Size 282KB
        • SHA256 8550ca39053d5b22be4e8eb8e1c3cecb1838d2c1569c94743a4dc6986aa7a269
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libflutter.so

        • Path /data/data/com.wzrrvcr.ohmdakbnbkj/app_lib/libflutter.so
        • Size 11.2MB
        • SHA256 d12fd96d667d5bac111f9c7d5fed6cf37805d896b9f69fa30c09198d3f6eb594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.wzrrvcr.ohmdakbnbkj/oat/x86_64/[email protected]
        • Size 9KB
        • SHA256 d47ae5e018552631894a0a28a2cc5bd9694c35bfbc47dc0e56212dffd5fbe5ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]
        • Size 7.7MB
        • SHA256 fad3e9954eaed226bfd8fa509dd668aa7a5309eb8a77cec451c9035bccf09709
        • MD5 SHA1 SHA512 SSDEEP TLSH

        [email protected]!classes2.dex

        • Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes2.dex
        • Size 1KB
        • SHA256 fdbeb7236a3ae41ea1cfd1f6fa6d7e08d85d8bbea38fc6ccad03796c35d8829b
        • MD5 SHA1 SHA512 TLSH

        [email protected]!classes3.dex

        • Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes3.dex
        • Size 210KB
        • SHA256 367295f1498ba9e4ae96507f899c1724dd1ef4336b62546750049549ef95f92b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        [email protected]!classes4.dex

        • Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes4.dex
        • Size 3.8MB
        • SHA256 8086582d1b9e86666e550a237e6e10736eb80b90a344e24ad66e19d3470b53df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH