645f19e33ac6390311ce39cf3f6a160858831805cf30a3db1721837ecaae9d0c

Analysis

max time kernel
94s
max time network
161s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/11/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KING TOUR BD.apk
Size 17.6MB
Sample261107-pe75fabv91
SHA256 645f19e33ac6390311ce39cf3f6a160858831805cf30a3db1721837ecaae9d0c
MD5 05ca89b7c35a247f51f6dfcb6b6d5215
SHA1 de5c9b2bec305a644f8c9861445933bd44c43092
SHA512 b25108efd0b4cd0cc1e9323083c94c59c0fd18173bc362e623d9ec16c12e96e63c843523b4c7a56e37a7d3a06d85db65b26596763f07e64edb8a44bd3322e802
SSDEEP 393216:p1Dx/W5b8T4gpPyrvxqfDeWlWN6FqwEO3yAjV4EsdRv:b1/WmTvpPoZqSWs6F9EODVyv
TLSH
T1F31723C6F7D8D92FC4338432C9A656E6518B0D168A82DF833914B64C59B7AD80F5AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.xusesportsbd

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xusesportsbd

com.xusesportsbd
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4702
- logcat -c
  2⤵
  PID:4748
- logcat
  2⤵
  PID:4766

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.InstanceId.properties

Path /data/data/com.xusesportsbd/no_backup/com.google.InstanceId.properties
Size 2KB
SHA256 86f6516459a78da3ecf5372f4bcec04f40d0da8f9af5750e89fc43d7a2574795
MD5 3c985fb2f78447f8c783e410901a9884
SHA1 698199b54c0f883dc265aab480feff09d0cc2a46
SHA512 0890119e27bbf48dd9d081a933e7488be9c2922e54a66f4a618cfe4c4f599bc1b718f24e4d26b6b09dd32c2a4a9b09f3e0cac7307bf67e74c925e63ccdb536ad
TLSH
T1E1413C4847FEF0FDF375A3796E4D115F915DE84CB3C0A01A4249A8255A548C363AD83C
MD5 SHA1 SHA512 TLSH

Submit Download