Analysis
- geolocation tags
asiadelhiinindia - user interaction
yes - max time kernel
139s - max time network
152s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
06/10/2026, 04:38
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
SecureVPN.apk
Resource
android-35-x64-arm64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
payload.apk
Resource
android-35-x64-arm64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
payload.apk
Resource
android-35-x64-arm64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
payload.apk
Resource
android-35-x64-arm64-20260721-en
4 signatures
150 seconds
General
- Target SecureVPN.apk
- Size 16.0MB
- Sample261006-e9qtjach68
- SHA256 de78e75d178b6581cabf06f9219ffaab4e5748ba74e73de5dbbc669ff2e761d9
- MD5 72cd818c94e331bcaad26e6575525c4c
- SHA1 4014b11655e5febbc210ca9030def7bb41464961
- SHA512 7dba8ff5a7241818c1fa42aaf91a75957ec8bd2f9f1be1d42a3e0cd9bda31ba629040937988cf397b8ae10d1b45ec4f5340bf95de6a1a5bdcb0233c8a5651ea4
- SSDEEP 393216:Kv/d6I000eVJ93IgG5a00eVJ9U1RWd00eVJ93L:K3d6VIzFG+IzU1mIz3L
- TLSH T19E0733C2E3AE387FDD610835AE5B45581A959E984B44CB472C08773C6EB33D84FAEB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.securevpn.app
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.securevpn.app/cache/oat_primary/x86_64/base.3302.tmp
- Size 48KB
- SHA256 1369402eb48a907605599f6302af6e5039867fee40ac810cf76157e0419e9e61
- MD5 04c90d516f6ee6b6e174d80d896088f6
- SHA1 843e296d7b7e58882b6808800d88a9601ec7d6cc
- SHA512 78f038e173e5d4f13b2c5c68aad132ce64c5c471f1360db8e358cf6e6461ad7d6d9cea87c06c83e1a6e6387f8d8b26b95de2822ce72894a8c7c14345b205cdbd
- SSDEEP 768:C0b//OtgeZM3ryVf5QJfBCPjeOWlr05GUIr2U5bbl4QAE:GNZGWqFkr2l05tIr2Wlhd
- TLSH T165234B6FA962D055C0EB7EF68A8B05B0E937542021563D84B9A2633F7833F08DF71B94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.securevpn.app/primary.prof.lSOtoD.tmp
- Size 747B
- SHA256 8932ed382f6af8885a02b4e1495a32dbc2a40cab0f60a7ee5d7355d01604b13d
- MD5 50e06fad198b119bd82f1163336f20f3
- SHA1 e89ae537ba524978094a3030ab6e28aaae66979e
- SHA512 751b06efbee6d188b77921923c5986f82f0dd3eabb30ea01d1989a098fc16e7d54ea666d267e33bf2693cd05da720998c64a68e89a2f984f78cf928526f39928
- TLSH T11301605A0B44E2D0CB5EBBF0A303A1B23322E6683C82A3D3750470A22E917604A694E2
- MD5 SHA1 SHA512 TLSH