Resubmissions
09/10/2026, 16:44
261009-t8y6vahv2n709/10/2026, 14:58
261009-scm82ah17y709/10/2026, 14:30
261009-rt5c7sbd837Analysis
- max time kernel
6s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
09/10/2026, 14:30
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Ponto de Coleta.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ponto de Coleta.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Ponto de Coleta.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Ponto de Coleta.apk
- Size 6.9MB
- Sample261009-rt5c7sbd83
- SHA256 e0770af27379570453734662684ab8b0e329310c1a7c9b35365f4156e2b22d06
- MD5 cac28c3f51277d8fc2908feaf89beff7
- SHA1 74e5adfdfbcca74b43e00e6404e2b4479a8357ec
- SHA512 4788d8cabd56ed315f443e1e368b3172d9db6978f2e4a0565cb9773ed0caff075620427333de8548668a034484a3b89ece667d958300f09bf7b951fa1ffd6a63
- SSDEEP 196608:keBSRfhpI9NHo+2ISH/YxFi9RjpawVibIWedwHaMM5h:lSphpANHsIkEFi9wbIWbaXT
- TLSH T15D7612CAF7989E2FC8771472896A52B116974C128E83DF43A948371C787B6D40F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4885 io.jolt.guard /system_ext/framework/androidx.window.sidecar.jar 4885 io.jolt.guard - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls io.jolt.guard - Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.MANAGE_UNKNOWN_APP_SOURCES io.jolt.guard
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH