Analysis
- user interaction
yes - max time kernel
8s - max time network
445s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
- submitted
07/10/2026, 14:25
General
- Target app.apk
- Size 5.1MB
- Sample261007-rrd38szy7p
- SHA256 e434505748e0a29563e1d22a365963f716c4186c06dcb64bc0a21797decf6003
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
- Acquires the wake lock 1 IoCs
- Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
- Reads information about phone network operator. 1 TTPs
- Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.pwmt.uvgon.agco1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Checks the application is allowed to request package installs through the package installer
- Requests allowing to install additional applications from unknown sources.
- Uses Crypto APIs (Might try to encrypt user data)