69310d53882b446057bc8f74fdf5bd289728b0378bfd7cd109319d830b53cb78 | Triage™

Login
Reports

Overview

overview

7

Static

static

6

vpn2app.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
vpn2app.apk
Size 22.9MB
Sample261107-wgcvmsfe72
SHA256 69310d53882b446057bc8f74fdf5bd289728b0378bfd7cd109319d830b53cb78
MD5 7a4b44544e1409b38c25c08d9030fad4
SHA1 9961685ec94f0ec3bda46f0745dc5d53e6f6d055
SHA512 920b1a89b92df568ace3e9bd953fd9170e56a3d02d06bc92e41add086688c9a605048303148926694b0f3da7e0ee864e12c03f767cd145b85f4184c9a0a91ce0
SSDEEP 393216:/8ghfV0vBqaCeWVSX3+5haU0BXA38bJu75NqaGbwLwypI50b4Tr5Gy8VSexzmK:UggCeWWu3atBQ38b4NqaGtan43t8HzH
TLSH
T1F5373352A7E16C6FED324035CF1A67FD1636BC228C90EB0B7460726E6A7BB8D4D146D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android defense_evasion discovery evasion

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

vpn2app.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

5 signatures

150 seconds

defense_evasion discovery evasion

Malware Config

Targets

- Target
  vpn2app.apk
- Size 22.9MB
- SHA256 69310d53882b446057bc8f74fdf5bd289728b0378bfd7cd109319d830b53cb78
- MD5 7a4b44544e1409b38c25c08d9030fad4
- SHA1 9961685ec94f0ec3bda46f0745dc5d53e6f6d055
- SHA512 920b1a89b92df568ace3e9bd953fd9170e56a3d02d06bc92e41add086688c9a605048303148926694b0f3da7e0ee864e12c03f767cd145b85f4184c9a0a91ce0
- SSDEEP 393216:/8ghfV0vBqaCeWVSX3+5haU0BXA38bJu75NqaGbwLwypI50b4Tr5Gy8VSexzmK:UggCeWWu3atBQ38b4NqaGtan43t8HzH
- TLSH
  T1F5373352A7E16C6FED324035CF1A67FD1636BC228C90EB0B7460726E6A7BB8D4D146D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasion

© 2018-2026

Terms | Privacy