Analysis
- max time kernel
6s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
02/11/2026, 13:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
AquaMenu_1.504.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AquaMenu_1.504.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
AquaMenu_1.504.apk
Resource
android-33-x64-arm64-20260708-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
AquaMenu_1.504.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
AquaMenu_1.504.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
AquaMenu_1.504.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
General
- Target AquaMenu_1.504.apk
- Size 2.8MB
- Sample261102-qdcsksct7l
- SHA256 0ca83058c07272aef23136727618dc79c9c47b489e468cdc8db90de9cffca620
- MD5 f937e0b1cc2d430f17d7fd4e9268df3f
- SHA1 8fd0491706ba9b9acf841a6566e3c81778947b34
- SHA512 57f263af8d21752b36a46729656992e930cb6e98cebb49fbfdf132d60d1d00dcbcf2104a2b1975f1092b589c9826e83db5869e7e6fb8d67b293bd1d74f89b722
- SSDEEP 49152:r7VmZqDJ32CKeC6+nQOKPSmWVMVjlu+w5bMvv/49CpT2BFmEWRT3ZgPi/Kjc+hLG:r7VWetDHmEWVMVjlurNMf2QPZgP+KjVE
- TLSH T168D533A881601155E25FEE33859013FFB720B8267775EAD10CC0B2E6526B7F65FB23A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.aqua.menu
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.aqua.menu/files/gpty.tmp
- Size 8KB
- SHA256 6fee891d2f84c4b43f141874fa2c51098aeeacf4b666d612db7ce00fff86c8aa
- MD5 6232044bf5dade361da9604f488e0171
- SHA1 86296e444c0f67c055588d2f26164e46782c165a
- SHA512 9e0f344c21b3cd72b86645d7bf78e6a7229ef9b67927493e3a7cc49e4ee12f8634ffa9be0323f98afa62a8c105bc5edf1c3497b83318706289ab85702bcfb4d1
- SSDEEP 192:RgM/EML5qKV2yg3v568kht0DGGMSskEjusE7R:WMcMwKV2HohiDokEju
- TLSH T17902A71BB791DABBDCAC433004AB47256336F408FB428657C744BA753C6278CAA1FA5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.aqua.menu/files/tool.bin.tmp
- Size 2.5MB
- SHA256 f53f2e3d486dea955eef20dfceb46999d21a310b05102e307f22822cfaa98c4c
- MD5 7eb7a44023e1df61faceb327a1653f4a
- SHA1 45bd01f658a04ee5986d2003fec2df1e630fcd50
- SHA512 18e61e365d0c239a1675dce033b5114862e5050a3f3468e94aaa434283313ad3a4e41349a9121c6bb77f47c236264f23416fd6e023e2527967179a790e58dc62
- SSDEEP 49152:nHNM/IU6i/1HobvOC5IdpqeOkJ22hcFsF+MSPiZln3QQjJ79T1wf:nCQ+/1Hn1rxL78UJSPY5dpw
- TLSH T156C56C13F6615098D99AC434834EA123F724BC9D07253AEB6BD8AB103F65FD0AF39B51
- MD5 SHA1 SHA512 SSDEEP TLSH