Analysis
- max time kernel
17s - max time network
153s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
- submitted
29/10/2026, 17:47
General
- Target download_34858816.apk
- Size 29.9MB
- Sample261029-wc2cfa1we1
- SHA256 a6c5161f0489ccc7b7c6dc55a54d3da1797fbb3faef97bdce124924d3beeb06e
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 8 IoCs
- Loads dropped Dex/Jar 1 TTPs 23 IoCs
Runs executable file dropped to the device during analysis.
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
- Queries information about active data network 1 TTPs 1 IoCs
- Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.kelsos.mbrc1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Schedules tasks to execute at a specified time
- Checks memory information
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
dpdres.apk
ktlres.apk
mdtres.apk
mdtres10.apk
mdtres11.apk
mdtres12.apk
mdtres13.apk
mdtres14.apk
mdtres2.apk
mdtres5.apk
mdtres6.apk
mdtres7.apk
mdtres8.apk
mdtres9.apk
ZyFdpd
gDEsQdat
jqUjnLUext
libkccXHdpqgc.so
libkccXHdpqgc.so
libkccXHdpqgc.so-journal
libkccXHdpqgc.so-journal
nnToNktl
pStcsmdt
androidx.window.extensions.jar
androidx.window.sidecar.jar