Analysis
- user interaction
yes - max time kernel
60s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/10/2026, 01:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
com.netcut.app_2.0.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.netcut.app_2.0.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.netcut.app_2.0.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target com.netcut.app_2.0.apk
- Size 5.0MB
- Sample261007-bw3pdsbx4m
- SHA256 dc96d41e8f041b75eff8e371b43dd887590a0fe7d4b797a0a039a9beb852a08f
- MD5 06a602163063e4de11b18c60c610389a
- SHA1 22543792529b00b1721c2786e11e982e4ce250a7
- SHA512 08fd3fd68e5b1abb825dca982b59b2bf02883b30cf15db2a954acd11e5be94071caf3148a8354505ac63df6257094f663608f426df5b7ebd91bfbb036f98f2c6
- SSDEEP 98304:iEn3uscne4CAa6EO/Ov1BVTreFZYlkzPqDKiBgTFu5CmrK9byxzfrmIJ8:iifGIDlv17ErqjAFV1GB8
- TLSH T10B36F14EF75CB91FC87F80360A6AD631118A4C168A83EB576818731CE8B79D44F99FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.netcut.app/files/audience_network.dex 5073 com.netcut.app /data/user/0/com.netcut.app/files/audience_network.dex 5073 com.netcut.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.netcut.app - Reads information about phone network operator. 1 TTPs
- Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.netcut.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.netcut.app - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.netcut.app/files/al/persistent_postback_cache.json
- Size 9B
- SHA256 4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
- MD5 a5612927e7792641607f093050b775bb
- SHA1 99216e1430784a2fc369f81e03a28e5f681735e3
- SHA512 3ce4dd5f437b9405ea6e4d6bcb16512c98914b2dd15a01facab5fc68126698cc37e0448fac28408560552e9688ad1b6948e0fb8c9d11f893635d20e970cd9090
- MD5 SHA1 SHA512
- Path /data/data/com.netcut.app/files/audience_network.dex
- Size 3.1MB
- SHA256 77fc2eae1b80b190e43d031600ba6c1e8b80ac1457e960cd3bdccfae98dc24b7
- MD5 5bec99a09f298f6488a91eea062b9aad
- SHA1 959a17093354fc207f67efb5d210669d68b94c4b
- SHA512 aacb7d917dd0c2d2204f993f1bfee9583bd794cf6d2fe5344ad44995078b64e9ab4287378df87e58f427bead7671091840bf0ffda2f51f427fbd01901a4ae3be
- SSDEEP 24576:kyCMqog97GMqlITOQPoTXtFdvX3IPHmATqvSQu1USHlf58P8k84ZYJN/Vc3xfzrK:kyeV7x2TdFN3KnZv58PvUcTpy6IO4FK6
- TLSH T177E57D16ED022A12EEDC827EAEEF030627395845D68363172194EB71FD870B69FD63C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.netcut.app/files/oat/audience_network.dex.cur.prof
- Size 706B
- SHA256 1703fb23802d568f2b7132b2a8a736952403cc58a3c6112ac7759171c14dbed7
- MD5 4a3f9f157d1133bc70e5869d145ce84d
- SHA1 adfb388cac8e442df16aa05a6764bc1e9244f1f1
- SHA512 5c02f56150ddfc83992b448db07e4a5f05e72c8c246144725c41e9771384bc29026fe56b679b553a37a67a8f06f9d78307c2acdd0663e7336e6ac04093df2917
- TLSH T19D0149425C40ABF6366571514A336C6379DF8DF2C7240E3879144FF58C22F3045A711A
- MD5 SHA1 SHA512 TLSH