Analysis
- max time kernel
17s - max time network
151s - platform
android-10_x64 - resource
android-x64-20250917-en - resource tags
arch:x64arch:x86image:android-x64-20250917-enlocale:en-usos:android-10-x64system - submitted
04/11/2025, 00:27
Static task
static1
Behavioral task
behavioral1
Sample
7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral2
Sample
7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral3
Sample
7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral6
Sample
base.apk
Resource
android-x64-arm64-20250917-en
General
- Target 7ec62d3c50d033b0857fe6f7e1e09de219001cf3bcc25fe5ddac25596b0c2922.apk
- Size 8.3MB
- Sample251104-ar6ptaaq2v
- SHA256 6ca691c97ab0028ce9acade5d079289668b1d0339ad330181c84fc7e7114c509
- MD5 12215a810e34537734e8802673a35c2d
- SHA1 47c3a8e85e57a263a911c9f670e014b420866722
- SHA512 92e2fc419e120c451f9f331731da6b1fd9bef2de75403bf85cf34be5d6a1651d2eafa560d1db8cc7ce38cde10c75705b87c4d366d4172688c62c85fbd90c0cec
- SSDEEP 196608:kAD11ar8RAb2GWt/HM/Gqniw1kdRDcCekj1y6n7c4:n1ar8/GRniwwws5y+7c4
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.half.powder/app_dinner/sN.json 5024 com.half.powder - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.half.powder - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.half.powder - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.half.powder - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.half.powder - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.half.powder
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.half.powder/app_dinner/sN.json
- Size 1.8MB
- SHA256 96f730307213a5c53699140698c3677f807c84b0af0150d7d34ce4cb5e2b3d6e
- MD5 533917b4683142fd39cdc827c4f084da
- SHA1 e32cc800b5378b7210f6effd1a47cbfa4a89d55f
- SHA512 e466b9b87faa396bce103661a7be96b12077f88706117525f3dab1fc783b682a8838c54f50b5ee764c0fce770b0b9e5f7c102b89ea1e00c37924e4797018298c
- SSDEEP 49152:SNG3wWzy+EEiGMuuqMsyFLkXmeCNRmif1RP9DiW:R3wrBGTubJID8tfiW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.half.powder/app_dinner/sN.json
- Size 1.8MB
- SHA256 c20358f5b9880170eab2b9aee6c8f19d34eedf9635f52fb48e85d268990eebd6
- MD5 3c21d742013c978e59307b98e259f770
- SHA1 3d58a3d9ce090990beccdaa6a52d23d32b90d2ea
- SHA512 432a23d506680a3167a3e001e8fc2e875ab7db4e487431875d60cadb494c896f10943bb828c42ac36b39d392278c989d02bec8ff788cd44435a96dc7e6b8560c
- SSDEEP 49152:Ype+r8havEHSVMHI+vQ7SCNscKRkatoWUnAws2VBKXHp:2e4vLVMo+vQ7SCQWWJws2BoHp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.half.powder/app_dinner/sN.json
- Size 4.4MB
- SHA256 448ae6df20bce5a7fc8a70fd0bb591b3ab33e93dacfb9b1827e774e9a863b068
- MD5 88eb499b2b641ab2e314bd260cdca050
- SHA1 81f44039a72d42bdee717adb827d6dfd7d2a6484
- SHA512 b9da23068223e6cb1eb4346d468771359d3e4b65ec33b6802841d1ac959e5b9bae6255ad3e84c3aff8f6d21943d5445816963c47b62f3ef9331c9fb4641036f8
- SSDEEP 49152:mx6SAyrK62iwk88pWbTc3IKadmBetAz37jeDKCCZj9OY0H40:mxnK62iwDbo3qmBeSWKCCZEZHb
- MD5 SHA1 SHA512 SSDEEP