2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0

Resubmissions

02/11/2026, 19:51

261102-yk45eacz3w7

02/11/2026, 18:43

261102-xda3bacw2t7

Analysis

max time kernel
51s
max time network
154s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
02/11/2026, 18:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
update_build_46480cb2.apk
Size 15.0MB
Sample261102-xda3bacw2t
SHA256 2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0
MD5 d1d484623d4a3ff20302ba6b0e0d80fe
SHA1 8118c7d903fb7521d80f6d064625899cd1f2f054
SHA512 aacd247a21c4fae3700a0a81df92da71f7d7d1ee1c43a076689be653fb9c5ad9565be188b0af336a8b3a8610c6c883e30baadd570eb319db9fcd23976dd01392
SSDEEP 393216:bFZe3CdzKI44nlIlGIS07dwTVeHd/aBXq+rjmyvJ2qS:JZe3QzKIzIkIxyTw9/aBXjdvy
TLSH
T102F63344FB90AE4ED8F3C3361D386235A04AD923C7139397C978367A289F9F84B855E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4166	com.template.baseapp
/system_ext/framework/androidx.window.extensions.jar	4166	com.template.baseapp
/system_ext/framework/androidx.window.sidecar.jar	4166	com.template.baseapp
/system_ext/framework/androidx.window.sidecar.jar	4166	com.template.baseapp

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.template.baseapp

com.template.baseapp
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4166

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.template.baseapp/files/profileInstalled
Size 24B
SHA256 f9891e04d7ba83fede1e2368a4234f90c79e2dfbaa075e4fa3bf141c5f190fdb
MD5 4fa53016ed8f5f695a5523324f2b8986
SHA1 8f67d2cb94d55a2076d664f5c8493efceeff001a
SHA512 bca9b1ac0ab5b90a5021ca0b1c8adde1d0de05f0c42e6138dddd1254321b6812ea479a59e5a4d7a961c2fb93d0d2d8646aafbba3a0fb50af2bfd61ca99ab8451
MD5 SHA1 SHA512

Submit Download

update.apk (deleted)

Path /storage/emulated/0/Android/data/com.template.baseapp/files/update.apk (deleted)
Size 4.2MB
SHA256 bfb771623565b905ae5cd9945f9ba928eee4187c2efd7965afc6ba9828927cb6
MD5 868a7667f176a863d165393ab802e1f7
SHA1 012ba73b8cb6d72dbb272a0589113782e9f43829
SHA512 855df20087a59e5ce64a5ca4c92e6e1888a49584a3d6de0ff271088c3bbccddc26ff45ac21fc16954e319fe35c81ad3fd6470bda51a3be5006895a68600874a4
SSDEEP 98304:A5e6GC176wGycXGrGUk0gTo/KrrW5Gj0HP/L:A1cwGycsdgiGj0v/L
TLSH
T17226CF8BFB88A86BC4F753B24576532245474C268B43D7935958723C28BB6D07F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH