Analysis

  • max time kernel
    22s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    27/09/2026, 07:05

General

  • Target
    f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222.bin.apk
  • Size 10.1MB
  • Sample260927-hwpabsag39
  • SHA256 f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.platininvest.alpine
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4250

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation2112929165977259987tmp

        • Path /data/data/com.platininvest.alpine/files/PersistedInstallation2112929165977259987tmp
        • Size 90B
        • SHA256 6ad7f993cf32c4da405a9346bb7f25ea86bd27518e9b5b5f9a98590a74ebbc02
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5108727962138445821tmp

        • Path /data/data/com.platininvest.alpine/files/PersistedInstallation5108727962138445821tmp
        • Size 564B
        • SHA256 179b3290c4749ee01866e9ea11e1524bf6888a1a4bca42217a18462ce70ea834
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.platininvest.alpine/files/profileInstalled
        • Size 24B
        • SHA256 9e6bff1f8568e4fe53fa17d920b0cfe4498d7d1c17e2e5177a945758f3616145
        • MD5 SHA1 SHA512