292f2918993b7bdb8aa89bd087c639b314d88acd8c39cafb0f7e1e837fed9749

Analysis

max time kernel
8s
max time network
41s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
04/10/2026, 20:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Google_Play_V3.apk
Size 308KB
Sample261004-ysrt2swemh
SHA256 292f2918993b7bdb8aa89bd087c639b314d88acd8c39cafb0f7e1e837fed9749
MD5 2315686e03e83f755ae9902f51f4635a
SHA1 318d8dbbac363a10de2466d801f57a15fcf01e69
SHA512 a955202904de887240427616055b620b3bc8a3036825a66b714ed8adc8201fa72c6ffa410cdfc29e9d95ed4578016b279aa55db9c9534b67c061fe6ae5fa870a
SSDEEP 6144:jvD7xH+ShOZpQV9MjlDa0hdpfouRQ+7RRanxboxJf6TUfDK:j/RdOwvMplpguR05oPf6TUbK
TLSH
T1776423B6B258B886FC5E6C708B5E50401E691EC5E612D3CB88FBC559EF8BCF14A185C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zarix.v1rus

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.zarix.v1rus

com.zarix.v1rus
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
PID:5065

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads