Analysis
- user interaction
yes - max time kernel
6s - max time network
81s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
07/10/2026, 14:18
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-33-x64-arm64-20260708-en
5 signatures
150 seconds
General
- Target app.apk
- Size 5.1MB
- Sample261007-rmgcssas5v
- SHA256 e434505748e0a29563e1d22a365963f716c4186c06dcb64bc0a21797decf6003
- MD5 6b22b1c5badc67b892741bc4e2282272
- SHA1 a56d2edb8e1bb5d3d0a618ead4b80ce452d6f69d
- SHA512 ccecc72606732489e51de805b957a0b7f2be0c8144332e51e3c997623f9d552db334fb1fc56e49b41bab565ea83c2d87feef5bc3edb3a368875cdf31deda96f0
- SSDEEP 98304:iU80f5ooPlK52xZJGqfuLD1ID3Ut9+29BwX17BKO1muG53FLwBM37+o/x:15ow6+HGqfAID3URI70O1K1RgM37+S
- TLSH T1F93633872300A2A0F0CEBBBA548AB7DB92718D41EE3564F860A47779FDB4FC413951E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.pwmt.uvgon.agco/[email protected] 4169 com.pwmt.uvgon.agco - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.pwmt.uvgon.agco - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.pwmt.uvgon.agco - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.pwmt.uvgon.agco
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.pwmt.uvgon.agco/cache/u.dat
- Size 12.1MB
- SHA256 7cb2d634b78c8959e77039005b1136a3048d1dc3b33c96bd030c55b81c62d639
- MD5 b46671e0fd42138238cf10590385916f
- SHA1 5aaac055979683e4df700dd77c9575dedb468b4d
- SHA512 b968e31abcc0aea353bf15b762922cf8a5d723a1f759e639d84154f5096a96652e5adff551da0c62078be69e65d53b1fa5ebd57812b76da322b727798544e3b7
- SSDEEP 98304:qZA+DxD+9Ed+eTghIiBK62vutSaJx6M2eadV20hLbSVB:qiDze4aU9z2eKVVNkB
- TLSH T117D6AE13EB129E36CA6F263558FA475877325B9BBB43478310C4D9B87CA33C186C92D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.pwmt.uvgon.agco/oat/x86_64/[email protected]
- Size 1KB
- SHA256 2ea020438401facb5abf0fcc6ee2eeadc1df600eb19be436745b8934a409c279
- MD5 288c8d62dba2dff71549f380e7e0ca80
- SHA1 dd5ac5ba90e4f74b2f96e4dc55104a7dbf01773b
- SHA512 fbc97e27cbecb907a19aa47dd19117031298d5f0fb7a09e3fd71f57c91762a4dec7c7dcba1287d479d05c7d96c4af9d3a4ed29f6a59918ddd393af251a861370
- TLSH T12E21AB01EBFBCCD3C0498975340D1D51F5B8D3A8AA74A9588DA483E8B1CAF3B47B4300
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.pwmt.uvgon.agco/[email protected]
- Size 54KB
- SHA256 cf5c1eb298cadbe6512351f9587ab340d52034a7b3b013b0dd8bb4116c5f3eba
- MD5 0c0e728f758b88c9b5ea8002cb0bf3bb
- SHA1 0dd0da655bf2bcaae6b5f3bdde10620e381ff541
- SHA512 9d0cf24382e4e72cdd649317efb48b17126de14a6129effa0ab77c5c9c108d95130a2aaa6e9f0b6afd88819ad12921b1156bf09eddc7498bcf7d5b8fd759fd28
- SSDEEP 768:B3LnoOjoMo3ydu+zMmWP6WKYmpCESZKVH9Wvcu4jHCtjpW17wtsjFykKIF:BbnoOjoMtwB7m9Wv/Rg176shyk3
- TLSH T17A43080363494E38FADE873B93AF53409675D68A2B3387576BC0C17998C3BDA55A22C4
- MD5 SHA1 SHA512 SSDEEP TLSH