Indicator
Type sha256 · source intel_report_ingest
Verdict
KNOWN MALWARE — Btmob
What this is
SHA256 observable 5aaaf972c8bf39a98f2748e526de3cc0…
A stealthy RAT burrowing deep into Android devices
Threat detail
Exploitation status and malware-family attribution from stored fields.
Graph preview
Neighborhood topology — open the graph for interactive pivots.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.