0d4bf6233f8227e5006b5261da3e5ea4566b2bf255e2cbff79620f0b18d21e42

Analysis

max time kernel
44s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
12/10/2026, 23:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.apk
Size 1.6MB
Sample261012-3ja76act2k
SHA256 0d4bf6233f8227e5006b5261da3e5ea4566b2bf255e2cbff79620f0b18d21e42
MD5 c7be3fb80e24d23c8bba96c64c8b4e36
SHA1 fc0b8e366575f79351f3919d3cc16a0f7ae3c646
SHA512 384ee70ccfbaeb9a2e50ec5d201de24c865e94104e4adbd4ed39378b7e36951f460961a2eaff903abe44875bae2ccaf2b183ad7fb4909262e484e030fe47c42c
SSDEEP 49152:mkTfjUmE9TuzGZiQ1yTDRweun2N/xg3w3x/qe4H:mkTdEZiQ1yTF4n2x/9S
TLSH
T156853348B393DAE0D9AACB3AB73055A7A7104D4859C5E3870D10B5C8EDBEE454F8CE2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar	4334	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.appointing.hindered.selfpossession/files/.cache/oat/x86/inhumanity.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar	4307	com.appointing.hindered.selfpossession

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.appointing.hindered.selfpossession

com.appointing.hindered.selfpossession
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4307
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.appointing.hindered.selfpossession/files/.cache/oat/x86/inhumanity.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4334

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

inhumanity.jar

Path /data/data/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar
Size 635KB
SHA256 e69228a94a6c64fb6a6beb1b3633e739402691a8202e12b2fbbfc59616a43cb5
MD5 fdd406ba6e5f2414e50b31e5ca4154ff
SHA1 b06cc99d53aebb2de79c46f995bfe96b17cb0577
SHA512 587890c9ee54eca9d1e377f90d5c6b6cc91ad583d279c71bc2267b9774a12bb81bab74898c071dbbceda14ebacd384a115d45c5c710a165ac70529d44d21d3b1
SSDEEP 12288:QkCLRvU+aEczuxTtoq++Nhkc3kdV75LrKtcn2FK5lOzAPhy7QDbJ0:QkCLRM+nxmx+NhJ3kdV7hKtSH5lty7Qq
TLSH
T1B5D4238DFC91F8F1FBFA299F0746B6048F4588B533187EE46AA7128B0C102E5D914CE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inhumanity.jar.cur.prof

Path /data/data/com.appointing.hindered.selfpossession/files/.cache/oat/inhumanity.jar.cur.prof
Size 466B
SHA256 517cd74737c82969d6d6bad6ab7ee920d213fcf19a7213cdf56efc5eb41540bc
MD5 8623a8b62b80a5c52bf16e3eb7c27a91
SHA1 ddeca7d3e10128516b85bb385b95bffcea2281ac
SHA512 48c6c86fb1349a1b8e7bc9d68116fc95510867b800ca75703856fbabd483f1679da8ee69485218f2646d482b690ba7406247b025b9995629b5da5a5203738681
TLSH
T170F0540221636157E7E3435431329E93D4E0D07F28D66146AEEF1551CD48A3DD0D8837
MD5 SHA1 SHA512 TLSH

Submit Download

inhumanity.jar

Path /data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar
Size 2.0MB
SHA256 ebe5eadea999d47c9843aed747363d69d1e674709b2c9ac51cc0d013c983735b
MD5 3e2940464982d355e78b524ce932787f
SHA1 1dcaedb5594b3c4f5769597afe8683be94cd5a1f
SHA512 f8d4c95357f21e97bdd7a783d84fb81a83c0d87647d8d8f0c2f39d89a72892068a7483ce9ba53c7905079477f7b9cc0f5e4c354ff2c29805efec26d60dd0968c
SSDEEP 24576:sO/je5aQ+wWl4L6XekWU8CJN1/iUfIIhV9kmYyzlaIiUbnEI4Sfq6uvNPlsY:5p5Z4Sfq6ulPP
TLSH
T14C953906E2925A33C56D9B3244738BC66337614A2FC7978B1588917CFDE32C57F6A2C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

inhumanity.jar

Path /data/user/0/com.appointing.hindered.selfpossession/files/.cache/inhumanity.jar
Size 2.0MB
SHA256 7ad0f21418b43d715beaa30088ab11b86123c22e8726ef76c662765eb1816f23
MD5 faba549dac53915b5cd699a3a5a2cf6b
SHA1 a7bc770f12ead0435c04c7a2410da610ba5ab262
SHA512 8e5ccc4c5c272df0ce299351deed299d65b484b763c761a84a6fe46e08aab2d0b243a2ec2acba965ec6f6822c59dc2d15551f8b2f1426df039029d7ae6200993
SSDEEP 24576:sO/je5aQ+wWl4L6XekWU8CJN1/iUfIIhV9kmYyzlaEpi6WdlPSfq6uvNPlsY:5p66wSfq6ulPP
TLSH
T188955B47E29299A1CC9F97B514B3C7463332798D2AC753CB2188D1BC6FE23E62B951C4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads