f8297d14e40827af27958313e4b91233edd584c32642166c0a662f7514eb5ccf

Analysis

max time kernel
18s
max time network
154s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
07/11/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Y1_a.apk
Size 19.9MB
Sample261107-pmfedsc13p
SHA256 f8297d14e40827af27958313e4b91233edd584c32642166c0a662f7514eb5ccf
MD5 e63be76900af52ca3b585e73e71774e2
SHA1 281fabff72e8b07aab3d06b33a65d180b42fd0a3
SHA512 49ea6d145147597641a4df061a8f9e486dd96a8b5ffb84e1079b5e8a864b3e0e5138fefffe6e97cc094ce5bb4b39af2ab6fd9b87f00577e097c5d980f8f60ad5
SSDEEP 393216:uOVEBjEN0KXCShWrcsxoP8DhSoQqApKidArGW8O6YpEMZNkIqyp4Id311X4RGv/V:uOVs41CSh8XDTRWdArGW8074Id3LX6GF
TLSH
T160273303A9C569A1F115B5301D6B49869E103F1DC2A0D4AF3DDD28D1BFB3AF4CB868B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.uiqincmm.llouz

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.uiqincmm.llouz/[email protected]	4159	com.uiqincmm.llouz
/data/user/0/com.uiqincmm.llouz/[email protected]	4159	com.uiqincmm.llouz
/data/user/0/com.uiqincmm.llouz/[email protected]	4159	com.uiqincmm.llouz
/data/user/0/com.uiqincmm.llouz/[email protected]	4159	com.uiqincmm.llouz

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.uiqincmm.llouz

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.uiqincmm.llouz

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.uiqincmm.llouz

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.uiqincmm.llouz

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.uiqincmm.llouz

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.uiqincmm.llouz

com.uiqincmm.llouz
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4159

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.uiqincmm.llouz/databases/com.google.android.datatransport.events
Size 56KB
SHA256 3a5a942597c1e9f3f24acc967844f45a7aa98ad8340debb919b9f96483d002bf
MD5 5617839a7e8ade2a2405e250d23dd48b
SHA1 2fa65e865dd03e73e194a9ace1d5a45e6786b3bd
SHA512 29bc51b52e012052e3a799712aa865dc707949b4f37f416c16f0584334d71e48ceea2fc46031f8d504de935c61a3fee7d322a67c01570d44f8fa0dbf6e760443
SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSo:RMEX0wIyNjao
TLSH
T1EC43639D5A2C2221C57E283ED7E243635B7C93DF5723926239908CF98DC206974355A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.uiqincmm.llouz/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 56339ad255bf2ecff026855434010c3cbb74beb200a74271949f74d120b9a094
MD5 8866675f642ac5d0c2d7a2ac88367faa
SHA1 aabaa646edb56e566218dfc4ef70fc3136323ebd
SHA512 306089f8afc7f90e29286236db94a33f5b7ff69f629f7f7ca3b09a0e752f68abfaab71e42f5bec24198bd2d9dd9985112d131e9605c30fbf05fa9774dfe5f9bb
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.uiqincmm.llouz/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d777ce344def77a36ea0c9462b18d10a61319054e7fcb422ad82abd5a95f27f6
MD5 64d2190b33b2d5deed5c06d0e126f47b
SHA1 d263e3a2a251710f41ccb3d4866dc874a6f675be
SHA512 308d63ab858234abfa75dedefc2947640465719472e9b22e5b04967fa29579f4c63c950436bbf934637ac1fc742940fc0dc63e476ecb55c34beb3ac629d4057f
SSDEEP 6:7+/l9xlgn15l/vg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKY:7+tdu/vqLiuWd7RmBEyPb/
TLSH
T13702C09C67800C23CD2E9AF790E583600D00E7288AB2CB2705510CD47CC38CCE8A0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.uiqincmm.llouz/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d76e5fe2750f152d3082db33d1e023cf8999dac30b4b59c24b5dfe27e48ebe50
MD5 333842aa91faec830bf8774b019b733d
SHA1 298178e577f8681e2e2d8258bc628ea2ffe12891
SHA512 7d1023b7f9b461bf6b04e6291f75c57fa27f64d4e925871063c95fbd73e80bc3962d0731aa0e0a6ac808e2516dea5cab9f0eee40c8be130d293039328e2a6990
SSDEEP 6:7+/l9+Gl0FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKs5tGt/z:7+tkGqBqLJdKBRmBEyPbXtSz
TLSH
T1A702228863E02803C03A577794D883809F61A7248323CB0B055008B56C426CCA890E90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 9de4f9e55a4f78059dfd71e6dc39b05d8dc215e64a3ad3e3389175c3633850eb
MD5 139e176262405639f70897ba39ebd50f
SHA1 698f372fb2a73b23183c5aa55cac0225f39aec37
SHA512 36a388281d616f9419df7ac507bb88e654e82fc8763c01f4a94270fbdf9e8ad6eda629bbb70c9ec3816f4b00a8f336399f3a5f02218e0ee4a7134335c4681dc3
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6cG:TLiEx9zmzrfRmBEyPbP/P+/0Fl6cQp7
TLSH
T1327268CDBB105703D1738B3670CB93E11C34B2194727DA173B540464AD421845082F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 9c787ef88e1a3dfc8f6832ad7b9d7ede4bd43bb71e15d816cdf5479941e02240
MD5 313038aae555c7669980d951b1a44f56
SHA1 da3451ca3b6a1d384f82b1d8370822a7b9dd3aa2
SHA512 e55c4c2f57ed578f0489f4d750256ace7578c71522a585d9d9247798af75272a3917819e7d3cf1831cc9c11ae37bb990048d90c5de2b176c3fc022a2a7f9fa78
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFloer+/0Fl6cQp7:TLvpmzr0GSP/h1499F/rlFsp
TLSH
T12572528ABA209707E2338F3570CBE3D52C3872264B23D6173A021A2C6E8238540A2F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 49a80c5f32b5518e22912bbe31d21ea0752e9ecb163f167df7011543ce18f7b8
MD5 c984ac89c4cb2019686e0aee15eaa632
SHA1 78b82ee9fdda8f8eee5336796a276f7659a29fa1
SHA512 8b24f798fc469c6fa2e4cac2641f3ca29c900ff4e4a67a68b62c1b21d572be9327fcefefd63caed6356b93d4b1f6fa481f84f717180692835f323f7f1ab623b7
SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/JOLabCAUg0yZjWlM/R49blqYFloer+/0Fl6cQp7:TL/pmzr0GSP/JKabCtnuR499F/rlFsp
TLSH
T16F72269AB6A4D717F2778F3862CBE7D52938727A0B23E6133D062B1C6D423818161F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 33313e8b61decbf7f8ac276ea544a21f7f51ff14b202ed0ea33f93c824f75f1a
MD5 a083e7507bb0f94f4498723b7e613d70
SHA1 d9de3080bf2f55a7dccd4938a202ba5a7f7507ad
SHA512 ed9ecde24164657a678c26b18bcafda52091e0da5eabfb696ae2fe9c7e6aaa3b1254bb5e122f6676931a20d3699c25e012c0fa39a23f95309f01fe0996a9bb31
SSDEEP 12:TL6uEO9zmzrfRmBEyPbP/uOLabCAUg0yZjWlM/R49blqYFloer+/0Fl6cQpv:TL6kpmzr0GSP/uKabCtnuR499F/rlFsh
TLSH
T1E872F289B6A4D712F2738F39A2C7E6D12939726A0727EA1739062B1C6D423818061F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 613f692bc9a5f13ebd099f614269d710c6af01d7655b21c72c4d1a53aea11273
MD5 0f33d19c127dac185a9d24bea05b7a0b
SHA1 614017cf6ee424cc161f84b9a10502ddc973c686
SHA512 ab0598d62e4e854c9e288201d950e4093244bae287a1ca30dd73249049b84bbe3699bbb50c75dc6191251b6ebc134bcd3bd7783184e71ebc7b9ec788188e9345
SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEgE9zmzrfRmBEyPbP/WK
TLSH
T128722BCD9F102603C5734777B4CEA3916E14621D8337DE472B990570AE834499051F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.uiqincmm.llouz/databases/google_app_measurement_local.db
Size 16KB
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
TLSH
T15972C2CEDF102606C6764737F8CAE3A05DA4A22D833BDA476B950460AE42559A8A1F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download