f6cce9bed127642293ec12efbe13efe2be15583b11a2414214bf850ca58871bf

Analysis

max time kernel
6s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
12/10/2026, 23:47

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SmsPay.il.apk
Size 1.8MB
Sample261012-3ste4acw7n
SHA256 f6cce9bed127642293ec12efbe13efe2be15583b11a2414214bf850ca58871bf
MD5 6c71cb16698507b08d2d3a8f649867c7
SHA1 ca47bfbdc146ce16e8d572b52cc4ca30a8ed87a9
SHA512 d257f45ce4520b8e3547da0298b37cfd72078dfd06512220d5518423e36b8c80bf0bc872cdd869dfc70d429ad2378ecac967c0128e137631aa732bd88c0e3aa2
SSDEEP 49152:2D/Q3dlVIjU+lgPstI1Y1gwnBxm4pzU6h:2mIN6sSkBQ8z1h
TLSH
T13C852342AA9AAB18E2771033DD1573E9D67D8C47094FFA1B0603B06C0EB79C55B9CF86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.yelye.wewewleop.pp

com.yelye.wewewleop.pp
1⤵
- Queries information about the current Wi-Fi connection
PID:4289

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact