d96af267b88a2395d6c6b907ba3d50e8e709f01add2b22c8bc382957596934ea

Analysis

max time kernel
8s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/11/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Mparivahan NextGen V6.apk
Size 9.2MB
Sample261104-wtlnbattfs
SHA256 d96af267b88a2395d6c6b907ba3d50e8e709f01add2b22c8bc382957596934ea
MD5 62dc99d36fd6578cc6fb168064ff2e95
SHA1 92f93d3eb56fc4e645de464ad4f863a2aa6f0827
SHA512 9ea1936f20a987552dfcb0e9bea84372d252bdecd8c3d40770e5de9b68de4e3c18fdf9ca734ef4a0ceb6d6a53d8605f2e12dce22d4081f6d26bc6029772827ef
SSDEEP 196608:5wKcIvhW2A72StN9cDhU3DGwXFETZNktlm3+efoiohbfruE8ZUmP:uK/U2aN9GwXFETnklmPfoiohbzuEIUC
TLSH
T1CEA6332A8C92C53AEECB4234B19B586799208D7A3ED91B49939071CDBE717F84CD113F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/jgj.sqiy.zati/[email protected]	4756	jgj.sqiy.zati
/data/user/0/jgj.sqiy.zati/[email protected]	4756	jgj.sqiy.zati

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	jgj.sqiy.zati

jgj.sqiy.zati
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4756

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

[email protected]

Path /data/data/jgj.sqiy.zati/oat/x86_64/[email protected]
Size 391B
SHA256 89a0efe849eb321c044d25947ca8bc00cc118fa8148a0a416abcb50b4b4815fd
MD5 e3a433a5afb2255f6314dff233e5ce24
SHA1 a8fb36bcd43549de7786eca3632042dd2184ff5b
SHA512 1857d41368cc9160a5d3dc95b87f205498354cd79d963cb8d6c7cab722bbbf187039faf71d7469adf8d9fbb6e9a906be5bd83523778f131c6b13850c1d6e5c87
TLSH
T125E061D12759C865CD2735B8F396420B36C037D2185515621BD201C0FDB7DF47D0D41B
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path /data/data/jgj.sqiy.zati/oat/x86_64/[email protected]
Size 411B
SHA256 e13b8160aa60d711770d9505505a477d997e78a3a25f614c917901cf473972bf
MD5 025cbd465d9ad95cd3950684b336dbc5
SHA1 eff17da213ede8625bd7fd7634db8c308a26b796
SHA512 a539b15bb07c6ebd280f52e9bd67151bc8246232e3f09130c2f829112fb360ba581be9b7489e8a1e9aca01acc1f288d4e6edff3caa82da0738a016143f31efad
TLSH
T14DE0AB923B298824CD262238F656021736D037D61855196259D61180BC67DE47A0E046
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path /data/user/0/jgj.sqiy.zati/[email protected]
Size 73KB
SHA256 b3879e4c0ccdaad0647c618a249bc69fc1c795fec39b64ab05db8b5ac20db2e7
MD5 5447a93ab8a17231260d849d7d1304e5
SHA1 38865a0dfd889d2999e780bb67f275d53582ee7b
SHA512 037c2f5eeb9068223ea800528a0da40bd2d0a047eec7a6bb073b6a76f50c170229db8a406e36ca77278e8e2c5d4bbd61a63ac952e747cfdf4647846847aedf68
SSDEEP 1536:hVfIT3t9muAstpeJLjAcKFeWl8RaFrlRjwxgUD0bPczNJm+:wT994s+1jAcKFhl8RohRjUa0hj
TLSH
T155735D0297D41E68DDBC9B7FA6BB0340A335E650A617C3430682EEBD9CC67D1DA817C2
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads