Analysis

  • max time kernel
    2s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    02/11/2026, 12:20

General

  • Target
    ferry-vpn-0.2.7-arm64-v8a.apk
  • Size 27.9MB
  • Sample261102-ph4leshx3x
  • SHA256 a970d236ac28b957740a8fe4f2248690dc25ae66b6c139e29d78601713697e34
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.ferryvpn.app
    1⤵
    • Loads dropped Dex/Jar
    • Checks CPU information
    PID:4075

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH