Analysis
- max time kernel
6s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
15/10/2026, 18:58
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Установщик Lemon 🍋.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Установщик Lemon 🍋.apk
- Size 3.9MB
- Sample261015-xmlkeabw4y
- SHA256 993f26f90338ef47b064d66befc7e793231c98ab017155ad872c72df7c13b9e9
- MD5 8c3eea7e8644bc37fbf908e30867492f
- SHA1 8ef85202ac6a90cae1925cd4db9dec66aa662fa7
- SHA512 07097fb286959d8979bbf067b76b5a170852e28b043758258acb5b8ad270ea00bd641aedaca451a925c7ed36e71d564190ab953fe1066681f995cd5b137c5992
- SSDEEP 49152:ATzgtc+cB7uk0DTzUKq1pOG8P6Vu9TzVTzkhVrOQN1AWHPfY2ruHBDwPiqX2Mz5j:AfgtRcB7unfUH1fkfVf0Vr/0kqhDQJDz
- TLSH T1C01633922A15813AEFA54BB0DADF2BDB287973A08BCF433B94035465364D31FBEE5441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/fds32hbs.dyunfd1bgw.q123/[email protected] 4815 fds32hbs.dyunfd1bgw.q123 - Checks the presence of a debugger
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal fds32hbs.dyunfd1bgw.q123
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/fds32hbs.dyunfd1bgw.q123/oat/x86_64/[email protected]
- Size 256B
- SHA256 a9b1f16dbeca26182fca17506563d6f7493fc2bf5348e303a29d101c1853025d
- MD5 f8a2e95770721286fae9dc0333e74735
- SHA1 31e8a2348186077f07013007a45b855457a61f67
- SHA512 e7b3f0fbc8542fb2a48fac3baab1b93189bb30540eb30e860cb337c3e9c2d46d636bdcfc29749d2d1535e86382a5920f41f23132e8f439224e20a4d145526358
- TLSH T101D097F1620D8010CD626638EB9A1B03338432A33C8219B36AE71EC5BC86DF83C4801F
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/fds32hbs.dyunfd1bgw.q123/[email protected]
- Size 72KB
- SHA256 c42eafbe76b3a6b02c73a6b8f0cceb2d7940f056f0a1b385f60b8b10d8abec7e
- MD5 7a94d6ded4f5bdb849a03ee08c38ea4a
- SHA1 109cb89a742415a1a8e2ddca9f6f8eb6cf1243d7
- SHA512 e4b2131de7dc0cd0b4d28bbf743f7ddbf10136c831096ef1c31d4801217339c7c69ef37d9fb1b562cdde01a3468c1bc6791c8cacd94ce58a2c09bed54811f821
- SSDEEP 1536:hRC2TDZoke3L+/TiKKx2IFs/oM01gcK62VslVBJs9nT:hRC2mL+/Tl82IFs/yeVslVkT
- TLSH T134731A43F5F1C516E9A9C23A5DEB4B417326E9198B33831324A9D2AFBC633D256C31E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/fds32hbs.dyunfd1bgw.q123/files/.lz_di (deleted)
- Size 219B
- SHA256 284521dd7f9dbcb7929efe7d144a0e9ffafc7eb9b2ad6d70a9f60ffb80356bc7
- MD5 2c99544758bafc2e9d9251ffeee6fc17
- SHA1 7591da6e83e7c64c7c0c85cfa2a1deb78b030c36
- SHA512 d6b06cad7c6d7acb6333c3a3fa371465697e9c5adf4032df8728212a28123a12b02919c09e802a238deab9cc90581bfd938c17a0fcf7dbc48fbd41c30c1c895d
- TLSH T17FD023785E306CD434CD7C06C601F72000A30C57E5CE26007DF767601DDBCC04080157
- MD5 SHA1 SHA512 TLSH