Analysis
- max time kernel
83s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260129-en - resource tags
arch:x64arch:x86image:android-x64-20260129-enlocale:en-usos:android-10-x64system - submitted
27/02/2026, 11:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Summer138.apk
Resource
android-x86-arm-20260129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Summer138.apk
Resource
android-x64-20260129-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Summer138.apk
Resource
android-x64-arm64-20260129-en
3 signatures
150 seconds
General
- Target Summer138.apk
- Size 5.6MB
- Sample260227-nf71dsev7g
- SHA256 7943027a23fd3f9cc231f4ef8dd26ca05b262a3b5b53a698f48bdae2e693e144
- MD5 f04c4e3354d7b175fe6d4555c9dbff3b
- SHA1 a739537126098c4d7f071d6ff3a45d6a591030dc
- SHA512 e686c8b74727d3f4ca01370e807acb85ddd30de1b3685d4cca308391f49d640b35da4a8ec8f9018f3df404e7b71fd71fd88ca2180e2b6bcf73163e539d989db8
- SSDEEP 98304:GrhGoTwrYhK8Yofsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpCltk:EjK8HfyaIbaciAFvrEZpXqmY9XrF/mpF
- TLSH T18B46F1C7F7D8A92FC877507289BE52B141874C028A839F836D18760C69BB5D46F5AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.pundi.worldtnt - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.pundi.worldtnt - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.pundi.worldtnt - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.pundi.worldtnt - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.pundi.worldtnt
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.pundi.worldtnt/files/profileInstalled
- Size 24B
- SHA256 d1d3234216e9ffa2e3b4b3252b1294fb47f7cfc363f07a0781ef74b85e5ffaf1
- MD5 b65f7ca758f0177d2b44c71638bda54f
- SHA1 c4e17cbd06aa4f30cd11a27189c6db8dc3f3067e
- SHA512 0b807e138fe9b83fc0896c8b49d67c76927751ce0f143981f7a1f8e0b0ba3c2d7085628ab156ac183476e4157ec8f9666d458ec184367ffeca939960738aaab2
- MD5 SHA1 SHA512