hxxps://vivoliplaymedia[.]com

Analysis

user interaction
yes
max time kernel
302s
max time network
340s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
23/10/2026, 19:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://vivoliplaymedia.com
Sample261023-ydx3hsde36

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4550

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 35KB
SHA256 cd184d3afcb39acda61c2fb2c086881392a8d5e688ed0d9f902d2979286fb5a7
MD5 1cf3b563d8d177e70d3792d4cf5febde
SHA1 f3fcba616f2081be75be65ae161218f4f8ac0608
SHA512 3c74b853233fea0d659b08e17483050efb9dfcf3c913af4d2ecf579d6af2a26dc958c446bd4b3a9b369052762225fde6aa76fe5270e959d691df1fe9ec05224d
SSDEEP 384:WzRMuXcVRzI7A11rRNYMPHk4AinAHODw0:90c7I7E7KMPHk4FnAHOn
TLSH
T174F252E662F0B87F415780F2D14BFA152DB0B303C29488C1BAAD52D75FE8C92B5B646D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793389335-1792784535316 (deleted)

Path /storage/emulated/0/Download/.pending-1793389335-1792784535316 (deleted)
Size 7.4MB
SHA256 e27cdb39662f33071d5c9e07b612e56a38ab4f019ece8ecbe93bdcf9c27e8ddc
MD5 a5983e4577edd66476b36c274f8603b5
SHA1 a1f405f48abbf5f0d7ef2fe636da0427dccc01e2
SHA512 542d5c354e00a05b928f8213f6eb0e067e0953159bb7b073ab14439706303c0770d97e09b6c607f4b56f52e45f916f6a75dcf5195848251983ce51dfe39f3b41
SSDEEP 98304:QfmZ7XzDueq44aFUuu/EkH7SH47gN9oDFCMaawGea2RBXbGYPFf79uTYAOlmUJjH:QfwXtUukBHGogNC5yax6n7mUJ
TLSH
T1DD7633B765589DABCA0E52B1CD8B6E080F62974FC1D4A05A328D0FD5B3CCA14AC797DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793389387-VivoliPlay.apk

Path /storage/emulated/0/Download/.pending-1793389387-VivoliPlay.apk
Size 14.1MB
SHA256 d4a0f41763eb14afc01488d40e41280829f3966893dbcce6a884d9a0b5dda5a5
MD5 8018d73d875370f2734bc4124c06fba4
SHA1 78244be48aabec90cf76897bf819f88d065afc65
SHA512 1d7f6d322ad0d4f80fe7034493aa6a6b9e415c1ff92d1606ec56965c5a8cce0cf66eefbe81e2118bd4e65bae58df1ff15863b50cc4f6e62931c2b16f734f535e
SSDEEP 393216:D9Sglu5MV8YR8MpPVSXVvXvKVDCSQJcw18ks4FeaC0AjOL:D9ST5XMpVSlfS1Nk8r440R
TLSH
T162E623DBF798992FC87710B2896E57B112574C068A839F836D44361C28BB5E82F5DFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1793389387-VivoliPlay.apk (deleted)

Path /storage/emulated/0/Download/.pending-1793389387-VivoliPlay.apk (deleted)
Size 512KB
SHA256 07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541
MD5 59071590099d21dd439896592338bf95
SHA1 6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c
SHA512 eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads