188f49a6d24710b66b1b51a1eefc75afcf2394f5fde84181f7c4d5574858fe10

Analysis

user interaction
yes
max time kernel
250s
max time network
466s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/11/2026, 13:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FurkVPN-arm64-v8a.apk
Size 13.6MB
Sample261102-q9vy2atzft
SHA256 188f49a6d24710b66b1b51a1eefc75afcf2394f5fde84181f7c4d5574858fe10
MD5 f5343b7bffd5d9a04670605a1a8ed4c8
SHA1 e3a0ba05093bde1cb2089529894a9492731b4553
SHA512 1020b7658f83451a5d37203548539866c2237a074f8383c3593f1dbf4358a7965861919a976005ef07fd0436d5193ea55c907c4229663f0d817967c92ac27d91
SSDEEP 393216:YAiyqDWxKMI8/DCzqhI0yMMzftqbw0npYWREI:WgKPXcj+lmwGpYq
TLSH
T122E633699232645BE6B9C1FFDA2F36142EA08DA091334B0B4B58335F77F60A48F257D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

com.furkvpn.app
1⤵
PID:3303

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.3303.tmp

Path /data/data/com.furkvpn.app/cache/oat_primary/x86_64/base.3303.tmp
Size 605KB
SHA256 c4b7b064dd6f9284c2e119ad7cd3b3caf55ab696653c3d303d1fbb99c037d811
MD5 0e8bd0b84de101fed3f3d8dded6de891
SHA1 e003a3c9e8adc5432be4b025a05fa9a719be0159
SHA512 bf39c8c7ee1611839f04cdfeb40d25e5f8e8025645e18da4b2f0fdddcbd1e18b92d7b6027412e22a9ebd869f45534e43794e0452479ad5b5a262a14c8ef17157
SSDEEP 12288:PcBEpmGOmpT+QhPBnXapQpQC1FzKwlAQ:PFwmnRZQC1F5j
TLSH
T1DAD46CAFEB628015C1EFAEF7DB8649FDF9298011635629009461773EA417F14EB70FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

account.json

Path /data/data/com.furkvpn.app/files/account.json
Size 164B
SHA256 79f3ab71584436666173f2009db096fc41378e1f6ca340662725392f677e26b6
MD5 796b1ff4ef8ee804bce04d20bba26695
SHA1 6c7b84d9b55f0d3395f0ebd8fb3232c693048705
SHA512 16ca44ee352ce0dc8220eb657502c065b192a5c098de11bd414e8f895baa06e32ef240664eec2d687a386441002e09d0540d9d980b47e4a2fc66f98afa53938d
TLSH
T1A8C08CA4E90F28B8D24145194E163E6E3DBCA0FADA696651F60E8A01486C159A2C809B
MD5 SHA1 SHA512 TLSH

Submit Download

account.json

Path /data/data/com.furkvpn.app/files/account.json
Size 164B
SHA256 28fe034257a2d1bf27080bfbd0fbe56eb31cf2b8886c8eb058519aca32bbcac8
MD5 044f20cb818c40af36d5be6fd3cc2e6a
SHA1 271c1efeacc7d501902880c18647a73cdbefc84a
SHA512 8983abbadbbef98525434db00b00859a51180bd91e8392aff86c915cd3c9584fb0c19cef4d04fdee9817166103b367c84610a97e485808667807d1b4eef9b5ae
TLSH
T132C08064E50A28B8D14145154E173D5E3D7C70F6D5555551F50D8A00445C15565C40D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.preferences_pb.tmp

Path /data/data/com.furkvpn.app/files/datastore/settings.preferences_pb.tmp
Size 33B
SHA256 e221d697be87496324148527cfb4112ce1c3f9e892b4c5cae022e5a70efcd031
MD5 8b83eae9ecb3d7e1fa3924c94e055e22
SHA1 f6b2c74098efc3aabb1270d2f2007c8c8b157fc4
SHA512 e8bddd25e0fbe86507d6c6823f73119472fd2921b208a77fa161c2443cbc32fe3dadfd49bd8916e2dd572811135fa1efa26ea4af6f5a76564bd8f52cc0db641a
MD5 SHA1 SHA512

Submit Download

settings.preferences_pb.tmp

Path /data/data/com.furkvpn.app/files/datastore/settings.preferences_pb.tmp
Size 96B
SHA256 ebee0e4d38bbd38eb1720c6c7b00d5ab4942a7c9727a81256423eae88eea86b8
MD5 8dcef05df98b589f2c858ff024fb341a
SHA1 8bac47ff0862525ac26a97bf1459aa265f926d44
SHA512 0218720a6da9f8dbb1b6b7999657588d25a85bb28b327495283481df108ad22576bcb4f23d01768759a226821a495a36eb92b8ee23abb65cedaadce8475762da
TLSH
T149B0128006512B6F062BAA0FDC688490AA4D0E3516D31A401EB00E0C8D681004016440
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.furkvpn.app/files/profileInstalled
Size 24B
SHA256 c68edc15f559ec0a4fec6ceb315f1df7ea21760fcf503bc4c2cf1c4b038965e7
MD5 b66a21a06538edf98da04f7e0055d85c
SHA1 7ac239adbfe2f6de075df67323c9bb26dcdcfdc2
SHA512 4f60bde871abdf409f35afd911fadfe7c33a8f72a7c0c59ff992b523ce739ab2ff2c1b03cf2576065175798385816e71033cd284050cfb984fe0657a1b546295
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.furkvpn.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e3ab94cd17ade5ac094ed59a4cc878270c3d936906d5036682f1fae2b93f69a1
MD5 4f278ec52bbf65d5f4a12c3db4e19a47
SHA1 919a1d741c6b315e6d908e98e2c21e42f9e8effa
SHA512 07efb98c8361e344516d5832d51c41c02e6e092093dc58ccf5688464e12aadb0595b5c0e597277f7ffb2d30e01b09d659f49f4b4879d85287b6e5e3e524e0d80
MD5 SHA1 SHA512

Submit Download

remote_config.json

Path /data/data/com.furkvpn.app/files/remote_config.json
Size 4KB
SHA256 13be162de0133d9e2a060ba738afde9017ced456ce4404030ba619e73fef29ef
MD5 34fa565a0d430b3510004e7a38272840
SHA1 076f090a425df613daa09f089f484554d751a5bc
SHA512 86dcc10912a1ebbf7c86e194c9411866556f614c514ef22b3447ae1533b5238c4919514908b92a00f2f3df13dde6dff440f5ba3e9671d99e1bbf8c939b404228
SSDEEP 96:a4+fbtdMDcNBa8wcX570mNOqTvApLGgnoQVXZXRX6XC7p1VV/:aRRlZnX570mNOqTo/omRJeSp7V/
TLSH
T1C0A164664B1480325BBC77CBF44A3CE8D9B401B6BA80B0C096A59C9DACF4154F04BE9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

subscription.json.tmp

Path /data/data/com.furkvpn.app/files/subscription.json.tmp
Size 3KB
SHA256 0bfdc3d1ef4e7db8ac9dcbe4adcb3292cad12debadddd2c9da33f21a0569f49c
MD5 d639a677c1da0b20276a722c09fd04e8
SHA1 c4b34dc7a452544d3176e50399cc6547f953eea6
SHA512 ac894edc9d039b01c72d43511b3c43e4b0e613ab3b70ff5a0f7e882cb567c7a63ae527861fc2e0a8c17838eb2ed415f17a551f996f6d60869097c38bd619af43
TLSH
T16A71FD172158E8BB1304F346C61639971DDD2A3777AB0799427DEDC920E8624F85BC2F
MD5 SHA1 SHA512 TLSH

Submit Download

subscription.json.tmp

Path /data/data/com.furkvpn.app/files/subscription.json.tmp
Size 3KB
SHA256 4a0481e4f1272b18ae3628010d84a9b786cb55048be0e96e771e68670035d284
MD5 0a28c9ca210b395270f5d58c4b49f0f4
SHA1 3f00df92641c271840baf74304640ef9d3a7bf97
SHA512 4f6e2cc3fb7c3f6c288df1212d805b78e53cf2492023f145658d383025d6c2cbcd53dbc7ebc5dce102669353023154cbbb9baa3445c926ecafaa15fc0210f26e
TLSH
T10D71FE172158E8BB1304F346C61639971DDD2A3777AB0799427DEDC920E8624F85BC2F
MD5 SHA1 SHA512 TLSH

Submit Download

subscription_configs.json.tmp

Path /data/data/com.furkvpn.app/files/subscription_configs.json.tmp
Size 109KB
SHA256 07008548a8f45af16d2aa158a5dded9a34b18d58b45f95f9633a9202878d8b62
MD5 3e84a4d431ac3427e042b8b127c64ebd
SHA1 b908f5207ea3d52e1d03aea463c25ae4f65f279f
SHA512 b386db0e75db54874aef9bdf7b909d4f802186034a8f75a738e835fa45992cde0007169cabf1552282a434c7a64a5f07e9bddb896f1be69d656cca2238baa452
SSDEEP 3072:R5fzXzJzjzIzTzOz6z4zyzfzhzzzpz3z0zYz2:R5fzXzJzjzIzTzOz6z4zyzfzhzzzpz3U
TLSH
T1BBB3A5A575C20E78AFCDD7C8DA55EA02E178F40764100C8EB179E9B4CBE7104FE1E9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof
Size 9KB
SHA256 62f7df7d8b6d46a91e56cf9dcb1b3c7c22253c110789fdf65b1a80e51e3d3175
MD5 a77c9b077e3ee13e7b2d2a30e918b8c4
SHA1 740e680734c94cae804ad79fd13a670d898e25dc
SHA512 fc729ad899afac1de80084992535462c73f9667db8454c667facae03b963b560166d5073eeb02e6ab22152dc94edfbc0d296c81ed02de4d266cb3ee7d388e462
SSDEEP 192:xrFR8Khdub580Ri5k9TN3Yup+C+WShjCD4nD5s:pr8sgby0UU3T+WEjCD85s
TLSH
T1D212B066A7340FC885A5B53118B407C6F06E37EC2526A2685FDEEF615C120EC6C99FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.0BVCSo.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.0BVCSo.tmp
Size 11KB
SHA256 3153325cd1b796602e299ab8be43441ee7962a80db1a2b42ba83ebca655f028f
MD5 b7e5ee21b663276946ea11d8904ddad5
SHA1 b694ad629e24b73225d2084763ef035070084744
SHA512 b17d1b4296cb8be79e644b21d98e43417014fb6a14fbf439ace4f2ae6b1af7d8f830a65bba55039c261ce0fc41c4314f6ed75b1aca48b0d615bf4a267d4f4c08
SSDEEP 192:BfsjJVGeQbZ93vODunQ0gN9oL0xnbPnHQARBzp5mbQKxl4JFRu2MbLrfOo+pgM7E:KzGnd9fODuZMwSQU35mb/xl4huxrfO/E
TLSH
T13232B0B5D79DD7CA85B448A761F8BF608E60FE20A346DCA3B90197133D72E971B8C058
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.IU1bfa.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.IU1bfa.tmp
Size 10KB
SHA256 ed4fa968760ad3526db035c02aa49fd8dc7e9c0375b097b44cd0d0822a76884d
MD5 56a6ff12e82f89b638e6168247e5ad49
SHA1 89303329df3293cf52244decd1fdfa88b9e3548f
SHA512 e1bcb3e25780cc82f91e5a56c5ecbe0d47f70289ffd93f0ea086145f64d965ec13944fcc7ef6a59bff0d99fa1370209e9dbbd276a57f75228cf36d0434f72b85
SSDEEP 192:B9sjJVGemSKpTN1Oum2iS9TIW1/nP98uNSeWq5K/LCSyWAQq0qMMn8MEvJhgW234:QzGlhpR1OuZiyP/l8uoVHeSyWAQxMn85
TLSH
T11132AFB8C7BDDB76E49655C458DEE93A2B8058060F8EE60DA9F3F8D49A70D33021604D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.hNgh5W.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.hNgh5W.tmp
Size 10KB
SHA256 9886339d8e13810ebe64c5d8eebed8d49dac22ecfcf811a571df8a9352fcd2ba
MD5 1a97d73e3df67413e3d4861bc83794f5
SHA1 43c28ed7460b7f5cc9aa78e590d0ef6a7d920b9f
SHA512 97a6debeb37a3aff2f15f7e31e62552de416f1e914ac4c18ee94483222e5c05055b17a7f958d578c562e1cf905da3c5401e242de47502339c57d620d2785d80b
SSDEEP 192:BEsjJVGemDHkIONzkftEMamLAWag3gO23oS2iX32qaokm/FMlEgFfb2q3Wsgkp:jzGxHkIOcE/yJ2GqGqaxEgFDp3aE
TLSH
T1FA32B090C7BA67C1CDFF4198937DEDE4B4309D4435269DCDE49B142220E4C99BEB7292
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.sxdbJm.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.sxdbJm.tmp
Size 10KB
SHA256 d3e60481177e3fd8e82485f2e54ba93b5ed36f3ac311fa77b18d422fbb151cd1
MD5 cb55cbab9c1dcdfd89fdf50a841cb23b
SHA1 49f26f7d5d89774a4852ffc59496b9fc4430d0ce
SHA512 f06cadb4f0df67060aeaa1e377ae6289d47dbdc59a81bab95e40f00aa940a3a3833e07e3ca983599bc53af7d6aaf5a17cb83aa7e66e274de9a3aa3c09f24cfe9
SSDEEP 192:B6sjJVGew69yKCF5xS4ovTK1mhRlloesxHO3gIRjPne9AFXhEYnsgMY:BzGNF5xyblloesI3gIdPniALZnMY
TLSH
T15722AFF42BE8D96EC431A51C9D74AED4B910B4E4A727C26C2CF5F0D02A0AD19F9425B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.wOxS8g.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.wOxS8g.tmp
Size 10KB
SHA256 ebff1b311d1e98fd9defdc30ebdd61f3917b30684641a621dbac811caaa07a1f
MD5 de769f5cbecc12fbec30aa93879e0803
SHA1 d0f7a5da698c38b668107660316802413112b544
SHA512 ef66f6b7acbbc863684f272f8645e7a10f5b1ab1439e6bd8d33dcf987aab21332a3670601547c296359610ba1d5c3a887258f389f853d8b29eccbdd5dbff587b
SSDEEP 192:B5sjJVGeRvlyaFN3uKJIBQAPzVvkHtZk/1gAFrhj1b7kibWZF9qFF45hjz:0zGcvlbb3ivBvKu+8BoL9qFFS9z
TLSH
T11932C0E8F6316C74CE6347E4B687DD7A7735C4029B6ADD2C001A3D7A329320AB398136
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.xyM1wV.tmp

Path /data/misc/profiles/cur/0/com.furkvpn.app/primary.prof.xyM1wV.tmp
Size 11KB
SHA256 e2c7a3ee6df8d5e6b256d0d155c81884dfa8fe23c3ad116e1966bbf39c6ba64b
MD5 51322a8636cd3c9bac09e144e4eaac55
SHA1 a4361407d6433095b9913b537a6035924057236c
SHA512 63489364f550c2164a34bc58d5418e5cd5b7557d642b420f6b45a56fd2c983fb2f50e453971bef43f92d390f62110f3d78b5f62a9611b17318c10d94f399a2c1
SSDEEP 192:B6sjJVGeqgNdlIuV70hmOyk1QixgiM55pySihFQsWtUE2wjHoLDisW+vVUTKDED1:5zGHgNTNV00kT655pBOFQdGE/IXu4VkR
TLSH
T17F32CFE9BF42AEC6E3E20DB8A416E92830978F169DAECA1570D14D84D8D9CF1330571F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads