Analysis
- user interaction
yes - max time kernel
18s - max time network
37s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
29/09/2026, 20:29
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PAINTBRAWLRELEASE.apk
Resource
android-33-x64-arm64-20260708-en
3 signatures
150 seconds
General
- Target PAINTBRAWLRELEASE.apk
- Size 343.0MB
- Sample260929-y9mxesstdx
- SHA256 2acf3cdda61d02bf6dd94911f46a6c5706b41dc4e7d14d405182c41df737599a
- MD5 80e48bf4afa88d541d3c2d85a845f7c3
- SHA1 cb80f896f8ca65ecc4aa7713c07599528c961633
- SHA512 2218a868a24e0c69cb9219002f9bf5e687f74e9807f8ae1854571931d8d599d90ec83bfdb0b08c4c0f19abc1db116fcb2274b0b51391cab222cdce9130c682d4
- SSDEEP 6291456:enLIIIr+oUxf1QdEFL85S7Bz+1Jg30RALfjpRIQ2jrMUWuW/g+fWx7+PYnYFjeYt:mZuOf1QuFL8Ud+1Jg30RALfjp+WuW/gc
- TLSH T14309AD877523C509C21D4D398CB6FE4C55AFBCC095137A2771A4BB8E2BF13D6A8AD01A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 7 discord.com 8 discord.com 9 discord.com - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo ORIGINAL.GTAG - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo ORIGINAL.GTAG
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/ORIGINAL.GTAG/shared_prefs/ORIGINAL.GTAG.v2.playerprefs.xml
- Size 129B
- SHA256 9b1958617ed977bb53bcd9f7a16c7bd423e89adf9beb0f60105dfd865d31f141
- MD5 6399d119f41e3cb4ecfd9ae569a0731d
- SHA1 d166654957e6141d347f00257e195dee8afdc238
- SHA512 fb07f7c51bacee3b43db118b7f72a233e8a06dfe6c068dd7dc89595e5ff55b33e8c86d5d821c276d7b2e7d3c76c90ad89fac57518f2ddd7610000c0606cb1f1f
- TLSH T1A9B02BF0D0F46D5259C0080544201A4422753663020838C05C23B4300FA8240026E110
- MD5 SHA1 SHA512 TLSH