Analysis

  • max time kernel
    17s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20250917-en
  • resource tags

    arch:x64arch:x86image:android-x64-20250917-enlocale:en-usos:android-10-x64system
  • submitted
    04/11/2025, 00:27

General

  • Target
    7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
  • Size 8.3MB
  • Sample251104-ar6ptaaq2v
  • SHA256 6ca691c97ab0028ce9acade5d079289668b1d0339ad330181c84fc7e7114c509
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.half.powder
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5024

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sN.json

        • Path /data/data/com.half.powder/app_dinner/sN.json
        • Size 1.8MB
        • SHA256 96f730307213a5c53699140698c3677f807c84b0af0150d7d34ce4cb5e2b3d6e
        • MD5 SHA1 SHA512 SSDEEP

        sN.json

        • Path /data/data/com.half.powder/app_dinner/sN.json
        • Size 1.8MB
        • SHA256 c20358f5b9880170eab2b9aee6c8f19d34eedf9635f52fb48e85d268990eebd6
        • MD5 SHA1 SHA512 SSDEEP

        sN.json

        • Path /data/user/0/com.half.powder/app_dinner/sN.json
        • Size 4.4MB
        • SHA256 448ae6df20bce5a7fc8a70fd0bb591b3ab33e93dacfb9b1827e774e9a863b068
        • MD5 SHA1 SHA512 SSDEEP