Analysis
- max time kernel
2s - max time network
153s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
02/11/2026, 12:20
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
ferry-vpn-0.2.7-arm64-v8a.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
150 seconds
General
- Target ferry-vpn-0.2.7-arm64-v8a.apk
- Size 27.9MB
- Sample261102-ph4leshx3x
- SHA256 a970d236ac28b957740a8fe4f2248690dc25ae66b6c139e29d78601713697e34
- MD5 88aded38470a6044c86377d8a60d44b9
- SHA1 3dce4ea2d9704163bfc35cc6aa87d1fc33ca2a8e
- SHA512 f7e9dc13daa0f76d4434901dacdfe9f078c44aded2e292290e3bea3b46499d3a1d78d613d1e9e922fb843be0d90c5d9513daafb96c87f3c86591b95e470680a2
- SSDEEP 786432:hHupgmkAob0Bwu8g6+wD0D5RSsW+HAFrar2U09J0o:8etv0v8e3D5UsW+HIar2Go
- TLSH T197571223F7190D31D57E93788DFE97446332B2DBEB47538A5248A498BC423C2B71E19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4075 com.ferryvpn.app /system_ext/framework/androidx.window.extensions.jar 4075 com.ferryvpn.app /system_ext/framework/androidx.window.sidecar.jar 4075 com.ferryvpn.app /system_ext/framework/androidx.window.sidecar.jar 4075 com.ferryvpn.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ferryvpn.app
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH