Analysis
- max time kernel
6s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/10/2026, 00:23
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
urtv-screensaver-oman.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
urtv-screensaver-oman.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
urtv-screensaver-oman.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target urtv-screensaver-oman.apk
- Size 4.8MB
- Sample261023-aptmgaa12k
- SHA256 af2e5a34f51baabbe3ff0baafe5aea5ff12ffe0f6ff2142a839fc2e2d1f3396b
- MD5 1e9f908558f271f27775362e0d78946c
- SHA1 0a6ff57490cd0fc910781269c7e73dcc0576df2d
- SHA512 22b87581524f9a506096baece507a33f5f06a1722d1d1f16e629c1ec84cd859acb48857a0dd3c737917570c160f33d8d57248f7abf191671d32b7c0c9b829120
- SSDEEP 98304:BbInrV+ltxoPwFUBzJzzWElRUy+WPvOWF4l/YOwQZ3uUbZfiVt1o9h6:BbIn5UtxoPwQx8wm60gOwkv9fiVt1o9Y
- TLSH T19B3633F5F5418A60EE7D2839C83D19F092B15624EEF66FF124E0BB6E609351D6DC830A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 8 raw.githubusercontent.com 9 raw.githubusercontent.com - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule sa.urtv.screensaver.oman
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/sa.urtv.screensaver.oman/files/web/page.tmp
- Size 478KB
- SHA256 6d6d1b15b826dcafdb065c47e75feab44792629aa07a179a707d7572cc7915a8
- MD5 de9228d9761ba8e9891cdfcf2a2314e7
- SHA1 7e9e8d324e055cdcfe7675f73434457c8014200e
- SHA512 63c4762e0abe39d1a01a650798fb6ee58082a16182eb7ad3b164df9376747b48207aefa97875dc137d2275afdfc059f0432e9b35d68f7b896729c986e0b4aacb
- SSDEEP 12288:HsptJMKE5afOT8QBMf6dKOLVMHvkrlPYlK0IeoCZenJAkCnLUNH9H:MpKBbnpCK
- TLSH T1A3A4ACE72256A4D3D2DF5B0F47D9303AC8217D224E06EC50E0BA9B54CEAB6C19E8C57D
- MD5 SHA1 SHA512 SSDEEP TLSH