9db10630e2efe0091744676d23c9ed55d7d8f2ee6f20e9c150e88d733cf5fca2

Analysis

max time kernel
92s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
13/10/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.apk
Size 12.9MB
Sample261013-ppm71sbg49
SHA256 9db10630e2efe0091744676d23c9ed55d7d8f2ee6f20e9c150e88d733cf5fca2
MD5 1575d59766d5410de1083d2ce61ee970
SHA1 5ad0bfeb5be6a597067d4e6ea61c22854778a1af
SHA512 bda6035ed9afdf0b9c4ec326e228705870014cdd6223169b9504654f793cbe134b6b4c69d9cd3bfa9ee47d4052c59da9756716996bc0bbee78e6496dc5cd39c1
SSDEEP 196608:G9OGwTxN5PVUyEgapCDmS2X+CfDfX6OtcCC1TjC/e1YF1AvXFfix:8ytV8gGS2+C7fdcC4PiTIXF6x
TLSH
T14AD62287F784E82BC47780B249BE9726559B4C168A8397432D18764C9CB7AD43F4AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.user

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.user

com.user
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4879

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.InstanceId.properties

Path /data/user/0/com.user/no_backup/com.google.InstanceId.properties
Size 2KB
SHA256 2153972809233b229c6e1813d6d8795a36556f93d782681937aadf74866a9b5d
MD5 df6e6de45c36c926c186b68c34eef414
SHA1 2563a2ebe795117b28b459778d3bbda1390e786a
SHA512 736c1f1db9b8018d8ddcd0450ff6ee2db410eedce0bbb75a62486511bcc687fafe4bb4d2f1e53a6e12f1ad831a7178990a27e31c5c56b30527d1f4e41d64f6d2
TLSH
T12E411AC619B410A18F6C0601AD1ED21F57641BB896C2C1985C0CABA2EAF630C33914BD
MD5 SHA1 SHA512 TLSH

Submit Download