2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0

Resubmissions

02/11/2026, 19:51

261102-yk45eacz3w7

02/11/2026, 18:43

261102-xda3bacw2t7

Analysis

max time kernel
8s
max time network
154s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
02/11/2026, 18:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
update_build_46480cb2.apk
Size 15.0MB
Sample261102-xda3bacw2t
SHA256 2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0
MD5 d1d484623d4a3ff20302ba6b0e0d80fe
SHA1 8118c7d903fb7521d80f6d064625899cd1f2f054
SHA512 aacd247a21c4fae3700a0a81df92da71f7d7d1ee1c43a076689be653fb9c5ad9565be188b0af336a8b3a8610c6c883e30baadd570eb319db9fcd23976dd01392
SSDEEP 393216:bFZe3CdzKI44nlIlGIS07dwTVeHd/aBXq+rjmyvJ2qS:JZe3QzKIzIkIxyTw9/aBXjdvy
TLSH
T102F63344FB90AE4ED8F3C3361D386235A04AD923C7139397C978367A289F9F84B855E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

impact

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.template.baseapp

com.template.baseapp
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5059

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.template.baseapp/files/profileInstalled
Size 24B
SHA256 7d505d2e3cb5fc6297c75215319e79adc9b76df92e61eacda3e25ecfd290498b
MD5 2b0da7d16a136f482257269364ba40ab
SHA1 f2b526d77b9885bb88322836c22901ac2a4310c7
SHA512 488ed6cc2d0bbeb7147fb066b9e8a090a60c1e938383d384c573a7d813cbb5fc1d03178f384a3a7c0f39002533f107a2ab15aef257cded2dcbfd14e1ea833882
MD5 SHA1 SHA512

Submit Download

update.apk

Path /storage/emulated/0/Android/data/com.template.baseapp/files/update.apk
Size 4.2MB
SHA256 bfb771623565b905ae5cd9945f9ba928eee4187c2efd7965afc6ba9828927cb6
MD5 868a7667f176a863d165393ab802e1f7
SHA1 012ba73b8cb6d72dbb272a0589113782e9f43829
SHA512 855df20087a59e5ce64a5ca4c92e6e1888a49584a3d6de0ff271088c3bbccddc26ff45ac21fc16954e319fe35c81ad3fd6470bda51a3be5006895a68600874a4
SSDEEP 98304:A5e6GC176wGycXGrGUk0gTo/KrrW5Gj0HP/L:A1cwGycsdgiGj0v/L
TLSH
T17226CF8BFB88A86BC4F753B24576532245474C268B43D7935958723C28BB6D07F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH