hxxps://github[.]com/iisu-network/iiSU/releases

Analysis

user interaction
yes
max time kernel
78s
max time network
88s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
22/10/2026, 18:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/iisu-network/iiSU/releases
Sample261022-w7tabatsct

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
68	raw.githubusercontent.com
69	raw.githubusercontent.com

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4055

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 502KB
SHA256 11e26f7f70889603c0c5c33183fcc4263e4ee8bdfcd059ddb17564e7b980d755
MD5 6519c24a839e0b93ecd2d6151621fbed
SHA1 1d80a506b808988d0bc05e9a9fe7bc982b2891b5
SHA512 4cf5a3baba664ddc3135004fc9b15fc9ec46c01d3e1743dcbb7867df39a4af8651e11acfd9769afdd5335a06f40be0fa72767ac683bcb3a4ac45a11aef7fb5ae
SSDEEP 12288:xv/5yfAT+8DMN3NpXoghdTQGtr+NN2HEoN/myWpOZzfi6QtfKG21svJz3G9e5lPk:xv/Y
TLSH
T110B4F871B1B4617E019B82CEA7B06B04D796E647DA0650D5B02FC3F88BD3CC6F963299
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793298903-iiSU-Alpha-7.4.apk

Path /storage/emulated/0/Download/.pending-1793298903-iiSU-Alpha-7.4.apk
Size 71.2MB
SHA256 0d3f788edd18eb3433c7ec39f75103ca336d5f16c872f695b0244ec986f2a11d
MD5 5ed42d48f10b13a940b0e0871190592e
SHA1 ade960060ba963bc80a333d371b647647f3d24af
SHA512 3955cb9ca08a5d177ea91498cdc7cfb8fb847bbb2466059d7e166087c4dfc7ed4676f956451f66f15f3033cb06b0b128b63e99c1ec3b529df090d5d334ad7537
SSDEEP 786432:TPPFmPn6zVobbXaAI5nnAxJoSJIC0/R9aH28FjOskxogphF3EF7czyGq7odvph/+:T8Pn6zuYM6SJIC0HsSphFEuydoJQPEQ5
TLSH
T1C8F7E002F64A4874E8ADA4B8834E4232E6313C48476392DF5B56DA14BF372E1AF7D7D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793298903-iiSU-Alpha-7.4.apk

Path /storage/emulated/0/Download/.pending-1793298903-iiSU-Alpha-7.4.apk
Size 122.4MB
SHA256 bc41dc4633d7eab443223c9e594313a8d7528a101261833001d4bc321559afe8
MD5 cccfbcf3954b26f225d9b4fb0a4b0143
SHA1 576b6b424fa967de1f6aacc582860b42c0e22630
SHA512 6ed77770baa0fbca894637885abc4006ddd53fdf9f86f3112e99cc4699239f969b9ba0e17a443de783ca6d658811f5b7fb5c7ec5a54943b587a7d657c4bd9b60
SSDEEP 786432:J3hUGlZEtjiHdWVpsHdBVZ10CJhU+N7X1dubCiEAU+9TexTmw62a+95CZN:JxjZ59WVSHd/ZDJlNT1doNEF+N
TLSH
T1F558339BF76CDE3FC8370472899A2232626E4E129E438757A964371C34B71E04F267D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793298903-iiSU-Alpha-7.4.apk (deleted)

Path /storage/emulated/0/Download/.pending-1793298903-iiSU-Alpha-7.4.apk (deleted)
Size 783KB
SHA256 ac3b86c26c0d6567eba1cfff88644be56b8d57eeebf480b340ef6cd151a16114
MD5 8fff0ce08976454a60562297a09a922d
SHA1 5c1fb998cdef3200af90fdc49d6e2379eaa0ffed
SHA512 f9fbe4d3c05630a42bc51528232e93e699454ffec4de1e074d54f17cd66348ea161e419fd528accc7ac24c9427752b31901bddf35d4164c8e7a12b619fbbb34e
SSDEEP 6144:MbQcm0fVOVxo+iurEeiM39oohiTp1JM8L1f:lafVd+iurHirkA1JM8B
TLSH
T15D056B4BECC28F8BE4396A3B99E349003746F4519992CE43734707657A4B16B7FC8A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads