6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c

Analysis

max time kernel
46s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
27/10/2026, 06:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c.apk
Size 4.6MB
Sample261027-hke8aaa17x
SHA256 6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c
MD5 9147e0e713076c4f276bfdabbe0b7360
SHA1 73b8e438c6be92843be9a955eaef3343dfdbd442
SHA512 c62d80bbc8434c8d3dadb089add372f7ec3f5841f88317370865859de721c7a1ccb0facad0e5d84619ec76a6115effa9af0ea1447ec2a5a43a650e3fd39d6ed4
SSDEEP 98304:q8eW1cyZAUsg3Mq3KSH+XBtmntgwQnaL130PO1Tt0rZM15:q84KFB8q3KY+RIgWhlr
TLSH
T11626E089F7589E2FC477503209AA5235525B4D12CE879B83A95C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5044

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 585b62a197539cc5fbe934b854f96bfddbc100a319b24bab9a391030d56baab8
MD5 12a7eebf63e73072a821d11e9632dc2a
SHA1 8ea445ce29be78fdbd4a3cfecd00f8a9f4085c8e
SHA512 a8595660068194c8f8947251db3e311fbc35d6920bc8ec95db276374dffe518b5d7e66d89c86941335e432b9c3d76a6cbce70d3ce741d3b04c2542137e7d61e7
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9c578a1fd058d1beab96728644884b1a70d9c040d4d7950a588cadb142af77f8
MD5 fde3e81c3b1540c962dd94e0aab1a6e3
SHA1 4da696ea6f8f9748497c8e7d4b762436e50e5726
SHA512 93be97336e7738894e559a155f73b4ef67f786d26bf1bd5fd6ee739476eb22d19a6e031160f573816a9d16a11b05a410b506fd7078dc323fb34ebad88390f95e
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 7KB
SHA256 24e0f4c4848ae5eeaba7075076546553dff10f96189d5d4b4cc4c593c89ad3b5
MD5 0082a5143a8df60e93eefcf287b2ae7e
SHA1 6ad96a0c9e09b7f36a3cf5df7c9bfcb5c4aeadd9
SHA512 9a2d0e908891899db9c47c23041e7b0ea09d84daa00e9d38b636a1645f11af27783fb99e88dd15fa9e110e883b2b1b53b28257a1abdd5f5eabb7b5ee6b16ff1f
SSDEEP 192:iuZofePZtBIrJraSDjzZoLaaz5eBPwf0JNRc:rZo1jCL1gFwf0JE
TLSH
T1ADE1AF2C8EC4237EC8B6B00EABE8F825A426E10ADB430FA6C6D755A1454741DB7DF538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads