Analysis
- max time kernel
7s - max time network
157s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
22/09/2026, 14:28
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
test.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target test.apk
- Size 23.4MB
- Sample260922-rtcm7asv2k
- SHA256 7f952e64693af54d117cab087984e489d8b7f6a8d94130dcf90858820bf2b3c0
- MD5 2d6dcb0a3777e4b21511758777cae58e
- SHA1 eed2b7f4de8cf302313d1b5107652d8b1298fbc9
- SHA512 798d8b3b1bbb4044239b9a2cbad3dbc12ec1706119b89c6d1cdaba17ad2f2ac90c7abd026267ce37d0a0ebceacd9ec9927fc14439b3f08554309d821e08818d0
- SSDEEP 393216:4yMMS4Fb75n+me7Vg96GpbwFH3KRdIl8Ry43:4/z4FZiV+sZ6Il8c43
- TLSH T11537BF0AD55D8532E5DFF13C6F7E066BB139246806E6C09AB91CA105FF972F006B2F92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model com.wzrrvcr.ohmdakbnbkj - Checks Qemu related system properties. 1 TTPs 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: ro.kernel.qemu com.wzrrvcr.ohmdakbnbkj - Loads dropped Dex/Jar 1 TTPs 10 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4872 com.wzrrvcr.ohmdakbnbkj /system_ext/framework/androidx.window.sidecar.jar 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected] 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes2.dex 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes3.dex 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes4.dex 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected] 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected] 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected] 4872 com.wzrrvcr.ohmdakbnbkj /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected] 4872 com.wzrrvcr.ohmdakbnbkj
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wzrrvcr.ohmdakbnbkj/.jiagu/libjiaguv1.so
- Size 282KB
- SHA256 8550ca39053d5b22be4e8eb8e1c3cecb1838d2c1569c94743a4dc6986aa7a269
- MD5 090a890673a05c6727bf312404003b81
- SHA1 04cc534faaa08678b6ff92d5f4e8c50c2834f054
- SHA512 22754f79351c4ab0445e68a9b81d53a4d38c7f91e1b5fda5a6781d4c4bf9105e7ccac691b7cf4621c3ce3e35ec76075bc3b166f7a1ecd5fcd2515c8f93485ad6
- SSDEEP 6144:4+FvQl6Tqs9Wn9OTwT4toCDEhL0ti/7NOK0DeueG9X3GURhd1wvOoZvxgxl3FQqJ:BGid13oZWxD0q
- TLSH T181542A27F5921DBECF26A531578E96327732B4589310935731E0BA303E9AB588F0DEE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.wzrrvcr.ohmdakbnbkj/app_lib/libflutter.so
- Size 11.2MB
- SHA256 d12fd96d667d5bac111f9c7d5fed6cf37805d896b9f69fa30c09198d3f6eb594
- MD5 eeb97d10c0e63a295b3ce48ff9ddbbc9
- SHA1 a1ac2124c68e72872f2b17a268e451fa0e95bd47
- SHA512 6d427cc7fcd332cacf9fd6b3e21d85dd4eb9065224b907ec7808efedc71aadb1c978cef43c9ddcd0b2b682badf45577cafab35ad6428ed6f5672d119f0b3e11b
- SSDEEP 98304:Tz6fztTMUxwGwz0brUZTL/b7/3zOIrkXviof6P0Il8aJPN:yzhUGwz0bwFH3fkXvRfFIl86F
- TLSH T14AC67C0EE41ED936DACAE17D8E9F06A37234351A1AE7C159390D4118FF836E41636FE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.wzrrvcr.ohmdakbnbkj/oat/x86_64/[email protected]
- Size 9KB
- SHA256 d47ae5e018552631894a0a28a2cc5bd9694c35bfbc47dc0e56212dffd5fbe5ff
- MD5 5a89b6f1490376d7a44b28300e29706b
- SHA1 31939702462d4b6a98c51d4ba484ce4c0d53bcc4
- SHA512 7fe02d252521d4ecee50959b5de59fdbce6f1ddaa3dfb7e34fc3d266900f45fe1f86e4dad01b89bee83391c40257b301beee6e5c9438ad17c0bd1130e9279207
- SSDEEP 192:5ktW8EY+oiAkn0QCgV1XnchRhiwLQ5P1S/sCn2UGti6mpVCgippQUNE:d8x+okT5nX8hZiP0/sqq66gapQUq
- TLSH T14F220624B66391598BFE897EF8AD3F10CC8D7042D710996ABF8080C2C94DE746C5BA1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]
- Size 7.7MB
- SHA256 fad3e9954eaed226bfd8fa509dd668aa7a5309eb8a77cec451c9035bccf09709
- MD5 6f3e190bf315543e3332641ffffe5c4d
- SHA1 67459246fb3c0bcdc13663a96074c2ffd6a45286
- SHA512 6dc8392655ef605719705d12d24e664d5fb4fb7fbc0c77576eec95ace3f07dc44c99c75e54429947680a9fc49d94735d8739d706030824522f33ddfb8407de00
- SSDEEP 196608:eLIqmtGfwx84SERvpvzy3U9P6T6XKy6AEBj2:onmtGfwx84SERvpvzy3U9P6yKjAM2
- TLSH T1BF868C03A7A64D72E6AD8B3B38FB17512B32A745B7634B571004C1E8BC433E1AE976C5
- MD5 SHA1 SHA512 SSDEEP TLSH
[email protected]!classes2.dex
- Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes2.dex
- Size 1KB
- SHA256 fdbeb7236a3ae41ea1cfd1f6fa6d7e08d85d8bbea38fc6ccad03796c35d8829b
- MD5 3a4c8b8609f3047f96b40ea6061371c7
- SHA1 d1990d69c2685432d5d9220d80f7f37970985a07
- SHA512 18f7222dd9ca53dd4d567c07c7b146eed9be390be6bbc5c364810df4e43e8c595e167c4cf120349c11d5379ccfd1e2100d8b2d579d5735730d447cbe7a6ef758
- TLSH T1FB417A0CB721A632C5184179AE9FD7A09618E0C94C66661B3762FBFD3ED252109C0AC9
- MD5 SHA1 SHA512 TLSH
[email protected]!classes3.dex
- Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes3.dex
- Size 210KB
- SHA256 367295f1498ba9e4ae96507f899c1724dd1ef4336b62546750049549ef95f92b
- MD5 26cbe60ece239ce07058fc460216d728
- SHA1 fcd5dabab321c2f44ac535bdcd7f4c9739d98064
- SHA512 8feab5f7a708076ecef29e57924ba6bf33f75556e85af8eed7b29440f679915851e457ba62db32bf0930f0118363cbc8c24aedaf40c63dbd3b9af881ccc6a827
- SSDEEP 3072:kVmwoQL1yS9w1EiYz8glvnlO95gaCGSthP53I2mg:kRoMy6wU8y9O95gaCGSthBtmg
- TLSH T1F224C352ED828A73D8AE42785BE2234267F1A4492747A39F103D99BCFCA31E35DD01D7
- MD5 SHA1 SHA512 SSDEEP TLSH
[email protected]!classes4.dex
- Path /data/user/0/com.wzrrvcr.ohmdakbnbkj/[email protected]!classes4.dex
- Size 3.8MB
- SHA256 8086582d1b9e86666e550a237e6e10736eb80b90a344e24ad66e19d3470b53df
- MD5 5577f858785765562ddc0a45e80cb2e5
- SHA1 cb5805b21eefac2d9d35d58cc23458126dc54f3f
- SHA512 9dda7b0b77efeefbd82136edc868be78825b77c21bdad75b69b0bd823c88889f3f59c0f095040564d5840f67608f10c44cc9c011e2d583cd5610ecf27cb0350c
- SSDEEP 24576:Od+bBNeO696L3IRvnIfLwAiM6KumfuXepUeX8KSBxGDX1Nhci4vzEjYpUkeynU+3:QABtL0IfLwAiM6Kumf5SBGlNj/m9
- TLSH T119168E0BF6366C32D15E67B00DFA6365633062E76783974618888CA47CD33EAD28F59D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH