674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184

Analysis

max time kernel
125s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
02/11/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app-release.apk
Size 6.3MB
Sample261102-pl98dafb25
SHA256 674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184
MD5 c6665eef112f1c7c7431c6d2147ecb97
SHA1 8e17d643b02bdc61fe01ce71d99afff9b192edb0
SHA512 0cace28dc2383f204bca8189a58fd2bcd682047feb208b79de4167694965e862635f8267a53439be7547516223943e582630db8a8ae9084b612aa839cb262126
SSDEEP 98304:pZVc7chQ2Di2tHAQ+ulQqEpAFOWWAjiwu5kCb9yuRo8zIrSPUwhdKHJAOAZLy41k:pM7Z4HAQcGaAjpUkCbbRZz0GOAZLyK8
TLSH
T18B66F19EF7195A2FC47710728CAA5233125B4C16AA4357736978331C38BB6E88F49BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	co.median.android.krljmlk

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	co.median.android.krljmlk

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	co.median.android.krljmlk

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	co.median.android.krljmlk

co.median.android.krljmlk
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4318

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

INSTALLATION

Path /data/data/co.median.android.krljmlk/files/INSTALLATION
Size 36B
SHA256 c6e24be68a8558f388dead96f663d7425e1afa04e5eafc86ae82927d036a0130
MD5 4e0fd97fe4ecb1ab7a596a308b3f5816
SHA1 f9bb8cc42937451c821b284ad0f04772330e06f4
SHA512 484a82f1c95c4ad76988d3f042bf7336779e89797c24ffaf01634a462c1c143b61a40d5a6b44aac6461b4a7abc255adbda22b974d61b0d7da0bf49749ee99add
MD5 SHA1 SHA512

Submit Download

regexintext.json

Path /data/data/co.median.android.krljmlk/files/gonative-config/regexintext.json
Size 1KB
SHA256 82060eb0118948c9793fc668197a0e37349ebc21b6c2fe7e277af77a6c75eb70
MD5 e3bcf29dabcc20796c9b4132239c9bf5
SHA1 6264e968b80f7f791b0033358b69e99b73f226f9
SHA512 3bb84e83f7b93eebde425f697e81361a45bfadf6e110caf2a16de34e533b3b8447a1fd9b12eab81c2448edc7a4cd6f7ffaef5aa4173110d20ec4644d2d2c26d9
TLSH
T10B410474C9380DB398C82864B25E421B3A72215B2FD5391CFB8C162C1F4C5BE69B420C
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/co.median.android.krljmlk/files/profileInstalled
Size 24B
SHA256 c692d96f981d1745dfaa7433c114f181d933f76ffd15e878c07617b4fc97161b
MD5 73335271be819b9b9cad6953ff1271a2
SHA1 030e957d9d61f382f04e8f50c06d0e8514a0f50b
SHA512 05ea696de225588b403bf5e2f634cadb4144bfd48947dbb22316dd90337a0db9b0573ec9107553a3a03a64e4651911abff7a7111cb57d4c848e66f6ee7b84fb7
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/co.median.android.krljmlk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e8134b595ff2e0a2e035cf26d47b2eb88ccee3ce6b915f9fe2ebc603f3d9015e
MD5 c254003564cd49a29cfd090e6feec0d8
SHA1 ffa31566c96fb1fc35b82afab389d720e350599d
SHA512 51e3d33ea5adc3ad5b5e854a134f1f7a62ef6981f3aea81b0cb9be1314b2a7c5a30470ff7c663285c9729fc9635af930fc2ff7893fbf883febb7056481fce2c8
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
Size 1KB
SHA256 240211707e209820516c0a79729077c1400e913886c5b376f194c1e46a155900
MD5 aa6e13f2f3f4e623fbeff27e3f81b4de
SHA1 41379046b787014580def202930dce4d4c6582d8
SHA512 87fd9627056f575f618bfacc03dfd87b3438a86db6a1fc356019ed28806f2a5183994c1cd2914a185506f59b7fb18eb685907bfda0af713ac4780a7171ad9281
TLSH
T1E041F98802D5E10C52531B6A01A44933F3F2F663779200BA8C39F88C13534BCA4523D7
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
Size 4KB
SHA256 c3c7e07682fa14d555c86b2848e84a9bda9ed82b0a213ddffe87198b1cc60d6c
MD5 37d733dd637371a6be667b2f9552737f
SHA1 0f8ca37c8d7319c6a932e7b8bddc8c02fa635a79
SHA512 a3990e9d68724ba32bc33d56acbbae36d9c58ea75ad1f73467522e2846b05269c19f36cf04482fa4367ff86d00eace1c32504ea43732a3b8c75b7b9afaeb559b
SSDEEP 96:rry8j9cMt2FJlfgs82uOiAEE19btMG/dKknVMxZPSjNCoZZJgpSOc:rdhcM8Fff6LpAEE19RMG/Iq+TM3iSR
TLSH
T1ECA17D0C7E5D447EC9DC3AA4776693D657000D2D8B812479E06BD812E28C82A9D2FCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads