cfab35d6005c8de2458b10093de622273997b85ed7c9327618cdc88ed2eabafd

Analysis

max time kernel
147s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/10/2026, 18:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
staff-app-latest.apk
Size 8.2MB
Sample261007-w7z3vsds6w
SHA256 cfab35d6005c8de2458b10093de622273997b85ed7c9327618cdc88ed2eabafd
MD5 8e7117de47956af801fddc952fd7e8bf
SHA1 47b3f274e0e4dfeabf9ca3ab385268c8d4adda89
SHA512 f91b1377eeff88e51385ddf1b406a81771bf114193716c568941524beb6a34968771e4fe761f7d977d2ea2609aefa125a055371b23dfb821d12bc8d14b3d7758
SSDEEP 98304:/n8SZY4bysVXhbHoGEABh6CnQBf77zFAxNKpkA/5gayi1JDD3nzXkZvU0FCvzCzi:/PlywXhLhEkhYZM0p/iaB7z4vUtMiRv
TLSH
T18C861286FB68DD2FC4776072096A5231275B4D128F83978769443B1C3DB76E80F9ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4803	top.dabokmullyu.staff
/system_ext/framework/androidx.window.sidecar.jar	4803	top.dabokmullyu.staff

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	top.dabokmullyu.staff

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	top.dabokmullyu.staff

top.dabokmullyu.staff
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
PID:4803

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/top.dabokmullyu.staff/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 89e1aeba19703d7b4a5db83e017264f7cf2ee249b8e8002f0c01214e443e96de
MD5 adb59762216b6d5947b8d34992d092e7
SHA1 8c826b8bc31a7672ac565ba35942c38bab5adab4
SHA512 9d281cd59fe7682d1490e35bbf52c2f564e7809c7e1aa9dd083f25445f39e70ed87b790f83d10d774571b69ed12a47d0452bd947c86c9a7c6e0e79400fdb36e0
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/top.dabokmullyu.staff/primary.prof
Size 4KB
SHA256 ea10ce0bf4a6dae95ad7711335bd813fe7470a618e208cc82ec625178bb2bf3c
MD5 e5d08daf1d3ab67848d15f2f144b001f
SHA1 23eec3a5b1fd2bf0ecdd647a8ce66017455e07ee
SHA512 f97a0111e752087fb497c24b6866a8c3e3c8ddbcf9890ff78e7d06d5e25c973dbb684dda6dcf50de53e39d3344ee5a9093528c44f4c74b856fa9ef928db4b349
SSDEEP 96:OS+7NkUOCRAWEnoWzfOkQ9zavtZSfAzFvHSAm:o7m0BEzfO/0hSAm
TLSH
T171816BDACC3B6A4C2AC559308B9C56A4165B88162C6B27920603642E2A1EA6C3C2FCC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads