Analysis
- max time kernel
141s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260129-en - resource tags
arch:x64arch:x86image:android-x64-20260129-enlocale:en-usos:android-10-x64system - submitted
23/02/2026, 14:32
Behavioral task
behavioral1
Sample
80A2E45C8EB14DDCA78EB83CA622FE1A.apk
Resource
android-x86-arm-20260129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
80A2E45C8EB14DDCA78EB83CA622FE1A.apk
Resource
android-x64-20260129-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
80A2E45C8EB14DDCA78EB83CA622FE1A.apk
Resource
android-x64-arm64-20260129-en
4 signatures
150 seconds
General
- Target 80A2E45C8EB14DDCA78EB83CA622FE1A.apk
- Size 9.6MB
- Sample260223-rwjvaaf16a
- SHA256 4b1819e1acf55a57adaacaaaaf39eaa79302523812d48a4be64cd09826c2fa3d
- MD5 80a2e45c8eb14ddca78eb83ca622fe1a
- SHA1 93531295280a91dca9e20a777ade40ed70c0d4a4
- SHA512 c65d2e227221deb4ee6c50ee06f9ce8baafe29ee8bc68ea5931db089197cf54dd52aa639ff2fe5666f0fb5c7a4a312770932b4eb004bc79a9efd7cebce32f5f5
- SSDEEP 196608:EXkGaVXXHUdHKjAGHaKV62KWTktmDPLsrcVehg5R6zxv8E:rGmX0sjAya4jwgD20R6ztB
- TLSH T1B3A612CBF798992FC87750B285BE577112474C128A43CB43AD59720C69FB6D82F4ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mainer.howersle - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mainer.howersle - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mainer.howersle - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mainer.howersle - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mainer.howersle - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mainer.howersle
Processes
-
com.mainer.howersle1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5054
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.mainer.howersle/files/profileInstalled
- Size 24B
- SHA256 c0c56395dab1d78e42d22fe58fc81d2ac79b70f34e5e19a5d4f50d57a6d47fdf
- MD5 107fcf5040402309440709b340ad3f54
- SHA1 dbfcd1e4742d7446f774ccdb20b6add62498c846
- SHA512 9ffb726080ca2c515366ec5c68b3fd4707655b1de6345d5ced853e3107c770aceb6e199a46296aa4297408123fc8c8acc530d8affe31db18956c34259371e7ef
- MD5 SHA1 SHA512