Analysis

  • max time kernel
    102s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    12/10/2026, 06:17

General

  • Target
    kre.apk
  • Size 5.4MB
  • Sample261012-g17rsswy2n
  • SHA256 8d3479fdbce254ec0e68bbda0e65051fc616af6e16e3787a0fc32f0482c0da16
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.akxnln
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5116

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.akxnln/files/INSTALLATION
        • Size 36B
        • SHA256 7ac1f349b7dbc14aa310782657cb989eea4e68c2fb73cba0336476c97af0094c
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.akxnln/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 d6f8195993690fbbec3b884dc0ee43e7b0cffd47f4a5104885b10ce32454124e
        • MD5 SHA1 SHA512 TLSH

        splashpage.json

        • Path /data/data/co.median.android.akxnln/files/gonative-config/splashpage.json
        • Size 3KB
        • SHA256 341fe980468645c099c62b9a846190e742ac5325386b1e34a8630b45219580e5
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.akxnln/files/profileInstalled
        • Size 24B
        • SHA256 760ae43167e7a66bfe4ed7d153be08182c4087f2022531a60cc1270aeb25af2d
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.akxnln/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 1aec280aa0b0c079b63a73ce918e6510454a36a27740e30294bc27af638e6151
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.akxnln/primary.prof
        • Size 4KB
        • SHA256 eaddd28aa1ea0b017a4eefb1515b6b480c4e370a53adbd9f5ad7000bbf92db1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.akxnln/primary.prof
        • Size 7KB
        • SHA256 b097fb7f2aa032b9fdd84b481c2ed72bf67d0160ecb1878c3350f3f6120c8106
        • MD5 SHA1 SHA512 SSDEEP TLSH