Uzbek News Lure Dropper (provisional)

Uzbek News Lure Dropper (provisional) is an Uzbekistan-targeting Android dropper that shows a genuine Uzbek news article (from vzglyad.uz) as a decoy while side-loading an AES-encrypted second-stage payload (basa.apk) via REQUEST_INSTALL_PACKAGES. Its strings are hidden behind a multi-decoder obfuscator (Base64 plus a per-class XOR); the payload-distribution / C2 host happyuzbekblog.xyz is recovered by replicating those decoders. Provisional label.