Overview

overview

6

Static

static

6

免費獎勵.apk

android-13-x64

1

免費獎勵.apk

android-10-x64

6

免費獎勵.apk

android-11-x64

6

免費獎勵.apk

android-14-x64

免費獎勵.apk

android-15-x64

免費獎勵.apk

android-9-x86

6

Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    7s
  • max time network
    41s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    30/09/2026, 15:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    免費獎勵.apk
  • Size 6.1MB
  • Sample260930-sr7k8abd58
  • SHA256 8f34edb8a37408952ac8086030ab39c0215aeb9fd64755c310166e818c577fc7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasionimpactpersistence

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

    defense_evasion

Processes

  • com.hacker.locker
    1⤵
    • Makes use of the framework's foreground persistence service
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5050
    • logcat
      2⤵
        PID:5126

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          ad4803e0bc12937.uid
          • Path /storage/emulated/0/Android/data/com.google.android.youtube/cache/exo/ad4803e0bc12937.uid
          • Size 16B
          • SHA256 67b08b9e4b1993145b653e2fc8f73c786de13c2b91d6cb0dbb073e5442fa3182
          • MD5 SHA1 SHA512
          Submit Download

          RANSOM_NOTE.txt
          • Path /storage/emulated/0/RANSOM_NOTE.txt
          • Size 65B
          • SHA256 d2632f3f142681ff41b76076b1ab3bd22eb56cb369011733fbe2cc5f98696677
          • MD5 SHA1 SHA512 TLSH
          Submit Download