Benign Download

divar-11-14-17-b.apk

Legitimate Divar app, standard libraries

APK stages an asset and swaps the classloaderStaged classloader implant opens a socket
SHA-2560b194dab7e4600fb9e04d3c9828025ae650ed463f49f58e24f44db94a8cc3108
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeK₃(Li₃McTe₂)O₅(C₄As₃Dy₂Er₂I₂)H₁₁(Cm₃₁Cr₂₀Db₁₂Ds₃F₁₇Hf₆Mg₂Os₁₄Po₅Ti₂U₂)Md₈(ArBi₆Bk₂He₂Pa₅Pt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.