9db10630e2efe0091744676d23c9ed55d7d8f2ee6f20e9c150e88d733cf5fca2

Analysis

max time kernel
8s
max time network
155s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
13/10/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.apk
Size 12.9MB
Sample261013-ppm71sbg49
SHA256 9db10630e2efe0091744676d23c9ed55d7d8f2ee6f20e9c150e88d733cf5fca2
MD5 1575d59766d5410de1083d2ce61ee970
SHA1 5ad0bfeb5be6a597067d4e6ea61c22854778a1af
SHA512 bda6035ed9afdf0b9c4ec326e228705870014cdd6223169b9504654f793cbe134b6b4c69d9cd3bfa9ee47d4052c59da9756716996bc0bbee78e6496dc5cd39c1
SSDEEP 196608:G9OGwTxN5PVUyEgapCDmS2X+CfDfX6OtcCC1TjC/e1YF1AvXFfix:8ytV8gGS2+C7fdcC4PiTIXF6x
TLSH
T14AD62287F784E82BC47780B249BE9726559B4C168A8397432D18764C9CB7AD43F4AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.user

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.user

com.user
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:5084
- logcat -c
  2⤵
  PID:5128
- logcat
  2⤵
  PID:5146

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.InstanceId.properties

Path /data/data/com.user/no_backup/com.google.InstanceId.properties
Size 2KB
SHA256 60d3b9102761ea8a2e8fb9e43485479f4fe14ce57053e8e63bd7227029b4ee19
MD5 8dcb1a422f95316bc149e3449603cfbd
SHA1 941006aacb46f6d4ea7f5c336933884558c84855
SHA512 3cfce3832a147939567ea3cfa616cc0c84912da5b7d6b0283d7f038528c32e7c419b2d021ba7ad87dc8bfbe6d1118ce3c55c13631e5fce894018baf56c6e6497
TLSH
T177413CCD0DB6F4D14D359AA53C1613DEA11D0E6558E9C30B6588827504283F3ADBB32D
MD5 SHA1 SHA512 TLSH

Submit Download