202753b1758d7e42092f7b205087a6e52410204f878836b3580dafe0da705a17

Resubmissions

23/10/2026, 20:23

261023-y6cbhsfy6r10

23/10/2026, 15:07

261023-shrhmsdb3810

Analysis

user interaction
yes
max time kernel
48s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
23/10/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AL-baron_Screen_Locker.apk
Size 745KB
Sample261023-shrhmsdb38
SHA256 202753b1758d7e42092f7b205087a6e52410204f878836b3580dafe0da705a17
MD5 86a06ebabf2b3aa9d2f97ca77fe6c19b
SHA1 7d1c3809983cb25e21e127aecedef6d255f5b967
SHA512 af7801477cba6784996081ec78b04e3fdc42086fa35015b6aafd2e695fb1758318ef051c45bd270f774e7772f8bb6e087112e52c2ed87fac18ed926a32864baf
SSDEEP 12288:rN8j6Dvztn7LglUiJeyaqYUWGDIk8Z64ZFwId2gBFv+F1z4MIT47wZrVRycGq7d/:r+j6DvZn7clUYPOGDoE4wIdv+UMtUH4A
TLSH
T136F433ADB3326F80D4A77F3C6981A9139CA06B8D1BBA400F885AC5DD5D79780274FD2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.ABDALMLL/cache/natives_sec_blob4638706511185338788.dex	4791	com.ABDALMLL
/data/user/0/com.ABDALMLL/cache/natives_sec_blob4638706511185338788.dex	4791	com.ABDALMLL

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ABDALMLL

com.ABDALMLL
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4791

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

natives_sec_blob4638706511185338788.dex

Path /data/user/0/com.ABDALMLL/cache/natives_sec_blob4638706511185338788.dex
Size 409KB
SHA256 5cdeb68b4946db40e1674f0aa14d62b11f3f24eb7790d884bd696103037a3c20
MD5 839a4aa06849bce97531a8b623016c02
SHA1 f214d05ec394ad63cc75efc00a4219a5c895b10c
SHA512 3fbd20d68af8338e90da3fb9e441e8e9839722d57fbc83185b0c15c19c990b80d75b906477038299adee3ebe6b2724251aaeb8faf46e6a08b2868a32749de5f0
SSDEEP 6144:PZC3k75L3A06nNgxE/UlIIgoV7HKTi+Umupt2BddenlIv1pu1cPb27Q9JfpfLZKF:REeR3AKY6MPsUfbvmfT
TLSH
T15C944C21E7500E33C46BC73E60738B20BB7EE58D9B53CB9B5658F5B03F826A46A454D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

natives_sec_blob4638706511185338788.dex.cur.prof

Path /data/user/0/com.ABDALMLL/cache/oat/natives_sec_blob4638706511185338788.dex.cur.prof
Size 268B
SHA256 9fdbbd05d57044c56247fb6b8f7015aba0a259ed02079c0f0c2c873508b2ab8b
MD5 b996c5ba9d2f5856279b6126a0f28845
SHA1 c059fffb78b452d4801e8e5cdc87ea217f1ed535
SHA512 203e92388c2afe0edea9da626d77f21467e48698cfed67fd59f7064728c9a5edf358086dff64eef617b62c24f287430ab2f3eeb72aa2b6ea2137681fd839f42f
TLSH
T189D02B34930012630A59112663746B1BD0C9C946B6BB225F763CC5F0A5F22C6A5924D7
MD5 SHA1 SHA512 TLSH

Submit Download

cloneSettings_1891795744.json

Path /data/user/0/com.ABDALMLL/files/cloneSettings_1891795744.json
Size 7KB
SHA256 12281b7835917e025fe55d0b85422be667b95506e049ceb030eee3d69a21e409
MD5 00e451cd9c84192e72cb4f8c7c19da5b
SHA1 727d3ca2e2950c2a3e1b38a3422ce2a4851bfeff
SHA512 fad8afde45f2f7774f01453c6b911238517989bea59352fa740f43389d7e009249320a842811d620eeb7552200bf8dbf7db396a4d4ff8298225fec7d38825d45
SSDEEP 192:wHm1EbeGtFwHG+8P+DpsliOAQll8fJspUt9V:wHjsH4P++/26Ut9V
TLSH
T14BF1634D7A4825BE9D8BC3ABF51B0581833E4689349A7D14CBEB05AC71CF1C0637368B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads