Analysis

  • user interaction
    yes
  • max time kernel
    6s
  • max time network
    81s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    07/10/2026, 14:18

General

  • Target
    app.apk
  • Size 5.1MB
  • Sample261007-rmgcssas5v
  • SHA256 e434505748e0a29563e1d22a365963f716c4186c06dcb64bc0a21797decf6003
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.pwmt.uvgon.agco
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Checks the application is allowed to request package installs through the package installer
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4169

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        u.dat

        • Path /data/data/com.pwmt.uvgon.agco/cache/u.dat
        • Size 12.1MB
        • SHA256 7cb2d634b78c8959e77039005b1136a3048d1dc3b33c96bd030c55b81c62d639
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.pwmt.uvgon.agco/oat/x86_64/[email protected]
        • Size 1KB
        • SHA256 2ea020438401facb5abf0fcc6ee2eeadc1df600eb19be436745b8934a409c279
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/com.pwmt.uvgon.agco/[email protected]
        • Size 54KB
        • SHA256 cf5c1eb298cadbe6512351f9587ab340d52034a7b3b013b0dd8bb4116c5f3eba
        • MD5 SHA1 SHA512 SSDEEP TLSH