f95ed227ceee4c40881c2a7aaaa19d3f0d188c6ecdd6ac05fd535821dc647d5d

Analysis

max time kernel
62s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
15/10/2026, 02:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dianjoy.b.apk
Size 665KB
Sample261015-daa4csev8w
SHA256 f95ed227ceee4c40881c2a7aaaa19d3f0d188c6ecdd6ac05fd535821dc647d5d
MD5 1a3f01a9188d97850cdd0db2406ab849
SHA1 776617cfdc9cae63e32551b33e193785b84d4f5a
SHA512 7650e0dd4658d24ca41815dee0790e6dd9cb5dd073230f8d6357bbca700ff6841ed188a960396d6dec63320bfa9e38b2cd0d515420b809a3a0b59db0471294b3
SSDEEP 12288:b978oCZ1BLmvQ4b8PTs4LFAYbWfh26NNHLkJgb1KRffLG:p78oCZu9sJFAYbk2INHLeg5KRi
TLSH
T16EE4231177618930F8F717B56C71A500DB34BAA16AB3AAEA3CEE54096F7B7100F08E47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	GPSdingwei.net37.dingweixunrenn34

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	GPSdingwei.net37.dingweixunrenn34

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	GPSdingwei.net37.dingweixunrenn34

GPSdingwei.net37.dingweixunrenn34
1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
PID:5073

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

mobclick_agent_cached_GPSdingwei.net37.dingweixunrenn34

Path /data/data/GPSdingwei.net37.dingweixunrenn34/files/mobclick_agent_cached_GPSdingwei.net37.dingweixunrenn34
Size 100B
SHA256 126bf865c91fc7fb4ac92f30989aa8c0bf337d687f12abb198748f293dc616eb
MD5 27130308656ac56e3c2f6e6a31cb7082
SHA1 784da2225649adf92e7822b39dae8cfaee66d25a
SHA512 bc7159724777ed99da9af8760383ee9331af3e35e73adcbb1a93e498431ca31ed48ef88b67ef8d70dacd1d7911216b9271411583a6a9b4c6232ed031c47023c9
TLSH
T15FB0124B9716FCB94049C0219027DCFA07346853A5CDA15916F4EE04830C6968F04907
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads