Resubmissions
18/09/2025, 13:23
250918-qmryvsgp9v1016/09/2025, 18:41
250916-xb3pjsy1c1710/09/2025, 01:55
250910-cchqjsan8s7Analysis
- max time kernel
45s - max time network
156s - platform
android-10_x64 - resource
android-x64-20250619-en - submitted
10/09/2025, 01:55
Static task
static1
Behavioral task
behavioral1
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x86-arm-20250619-en
Behavioral task
behavioral2
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x64-20250619-en
Behavioral task
behavioral3
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x64-arm64-20250619-en
General
- Target bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
- Sample250910-cchqjsan8s
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.applicatioonnngfd.installer - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.applicatioonnngfd.installer - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.applicatioonnngfd.installer - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.applicatioonnngfd.installer - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.applicatioonnngfd.installer - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.applicatioonnngfd.installer
Processes
-
com.applicatioonnngfd.installer1⤵
- Obtains sensitive information copied to the device clipboard
- Checks the application is allowed to request package installs through the package installer
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5060
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.applicatioonnngfd.installer/files/profileInstalled
- Size 24B
- SHA256 09597a25786c90984d1d78c9cef46ef7feb1aba675c3ea863957451e651b31b2
- MD5 a6232d62042ad069df1daaef95f7a7ff
- SHA1 3efeffdb0d57b0c55c8bfe0faa672f6c9f582f42
- SHA512 a28aac2aabe86d1e1da10dba21d071eba803e0ce4ae35c2411cc5085a1a827a809dc8c7d691c10f111e1e4d83af57c573ce359267d8e6d9baac1c72042d6cd4b
- MD5 SHA1 SHA512
- Path /data/data/com.applicatioonnngfd.installer/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4ca205febe5696846c56ec57a4e2bcbbc9094c279ae180c285f4fa390bdc0952
- MD5 fd3478cb6ae7cfbf90e379483a7bd8d7
- SHA1 d68ea9496c2e27f21d7ba0f030fa3f9e2adc6ca7
- SHA512 a798709681ce177fe130f33b50c2340e942bcdd6f7ba00d70aaaa5aaf65e2d751bb64567e598c601fdd2e3d4f4ab2efebabf18f28cddf2f5403c92477a723c8f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.applicatioonnngfd.installer/primary.prof
- Size 3KB
- SHA256 dc08361f214173f8e9b5bcbed2ddff626b24ee48c81413b45402baeaef25d1b8
- MD5 62f7566e42709dc33b6461aaaf1e43a1
- SHA1 654b26c020e5164843cf6f8bd54b066cdb1454da
- SHA512 c33e32589f91e1dc8cd6df26d20d347b004c6f639a5fa847ee96b33900150a680b65db0a16215b937be2c7f88ff7140ce92714094ebcb39ea39c5855df1afb5b
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.applicatioonnngfd.installer/primary.prof
- Size 4KB
- SHA256 39079d0638b2e26b8fafd71158ba1234376d20eb19f854d9bfcdeee9fc7bfaf6
- MD5 af5f53495512189ebcdafe73eea51c87
- SHA1 83e7e7ec0eb4830a5c6d2574c941396360b44d65
- SHA512 016c22a078fdd009a7df6a4686aaca70b311efa16daaf05650d7a85ae7435b068652e0b12db950fd559523c84c21687c163a56a9b67068abc9fec7042b676ed2
- SSDEEP 96:B1ApUTAairNvcpmAzMmGTTpPIHICp+9bwSmciZS8NJ25jS9lUuCHecm:B1Ap0WrIMXGJpBz72j+lO+cm
- MD5 SHA1 SHA512 SSDEEP