2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0

Resubmissions

02/11/2026, 19:51

261102-yk45eacz3w7

02/11/2026, 18:43

261102-xda3bacw2t7

Analysis

max time kernel
7s
max time network
155s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
02/11/2026, 18:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
update_build_46480cb2.apk
Size 15.0MB
Sample261102-xda3bacw2t
SHA256 2ceb21205c3e8c23cad891fc2fe347fb6f64b9b8df1b58ecaaa667cdd2dc41d0
MD5 d1d484623d4a3ff20302ba6b0e0d80fe
SHA1 8118c7d903fb7521d80f6d064625899cd1f2f054
SHA512 aacd247a21c4fae3700a0a81df92da71f7d7d1ee1c43a076689be653fb9c5ad9565be188b0af336a8b3a8610c6c883e30baadd570eb319db9fcd23976dd01392
SSDEEP 393216:bFZe3CdzKI44nlIlGIS07dwTVeHd/aBXq+rjmyvJ2qS:JZe3QzKIzIkIxyTw9/aBXjdvy
TLSH
T102F63344FB90AE4ED8F3C3361D386235A04AD923C7139397C978367A289F9F84B855E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

impact

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.template.baseapp

com.template.baseapp
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4315

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.template.baseapp/files/profileInstalled
Size 24B
SHA256 3352963c0f640b1634cafe86506bb023bbaaa9049ac2a32d8cbe63e74bebe183
MD5 0ba0fbd7a0df75ca9bfc2db385ad0470
SHA1 7d46b98dffd36d9415f2b52e5a076234fd25100c
SHA512 1df81724c35f654e2f5d3457198453f3a769cb5dc05b6a0570c2b54344d988caa1a314d0210b352d1773e30cc00c2e793d98c981c1cb5ee7be54daf6b9186258
MD5 SHA1 SHA512

Submit Download

update.apk

Path /storage/emulated/0/Android/data/com.template.baseapp/files/update.apk
Size 4.2MB
SHA256 bfb771623565b905ae5cd9945f9ba928eee4187c2efd7965afc6ba9828927cb6
MD5 868a7667f176a863d165393ab802e1f7
SHA1 012ba73b8cb6d72dbb272a0589113782e9f43829
SHA512 855df20087a59e5ce64a5ca4c92e6e1888a49584a3d6de0ff271088c3bbccddc26ff45ac21fc16954e319fe35c81ad3fd6470bda51a3be5006895a68600874a4
SSDEEP 98304:A5e6GC176wGycXGrGUk0gTo/KrrW5Gj0HP/L:A1cwGycsdgiGj0v/L
TLSH
T17226CF8BFB88A86BC4F753B24576532245474C268B43D7935958723C28BB6D07F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH