70708a77b3a6bfa543d35dec64f9533e254e006d2a58907e05ad1bbe26c5f801

Analysis

max time kernel
1s
max time network
153s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
02/11/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
interpelli-1.0.30.apk
Size 46.8MB
Sample261102-agbfxsdf82
SHA256 70708a77b3a6bfa543d35dec64f9533e254e006d2a58907e05ad1bbe26c5f801
MD5 71510f2566646fff865b2fd1d5ca475e
SHA1 4f296d5b5fa60866af2e035cf418f61b018ed366
SHA512 0fc483c55b13eaa55f2441db8b582d9e7f3439737335f334895246d197738e2fc6e0358cfe104796a1ad9680180a7a470f12912160cb3865d3ea88eb07b576f3
SSDEEP 393216:+3Pjim1RxBzuRZ9SX1MYIwdotVSIfLWJ7hcsF30xtPHzAqVftL0s/VSCLCdAzRXJ:4xtuoX2YdozffY1PkfPT1ftL0EDmApF
TLSH
T135B7BF1DB74CA82BDEC674FD8C0A06A17126BC445A15C09B3C27B209EDB77E90B6D7E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4154	it.interpelli.app
/system_ext/framework/androidx.window.extensions.jar	4154	it.interpelli.app
/system_ext/framework/androidx.window.sidecar.jar	4154	it.interpelli.app
/system_ext/framework/androidx.window.sidecar.jar	4154	it.interpelli.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	it.interpelli.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	it.interpelli.app

it.interpelli.app
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
PID:4154

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

FirebaseHeartBeatW0RFRkFVTFRd+MTo5Njk0NDI3OTY4NTQ6YW5kcm9pZDoyOWE5Y2VjYWRiYjkzNmVhM2U3Zjk3.preferences_pb.tmp

Path /data/data/it.interpelli.app/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo5Njk0NDI3OTY4NTQ6YW5kcm9pZDoyOWE5Y2VjYWRiYjkzNmVhM2U3Zjk3.preferences_pb.tmp
Size 321B
SHA256 2d3d8450f8a801381e261220bf75f5b689e4667c77dfd848c3651d876f64dc29
MD5 f7eed83c302a2805bf615231e2526f4e
SHA1 ef84629db30919ee978d8a5cb019e49161607c91
SHA512 c176409826127342e0820fec086fe4151a22aa26c86000063f3f978e93be60bfb8894644beb3f1b219d595245ccce2f893b4e1bdbf81038ee6302115fc663098
TLSH
T11EE08610D6915EE11A2F514D3FB8012C0F2FB3E16176149D65F50184F51EAA5D6C6F1B
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH