Resubmissions
05/03/2026, 19:15
260305-xyamaaax3z05/03/2026, 19:10
260305-xvr26aax2v1003/03/2026, 14:05
260303-rd357sat3x10Analysis
- max time kernel
140s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260129-en - resource tags
- submitted
03/03/2026, 14:05
General
- Target BaDoink.apk
- Size 309KB
- Sample260303-rd357sat3x
- SHA256 4d3de2103f740345aa2041691fde0878d7d32e9e4985adf6b030d2e679560118
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.android1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
-
com.android:remote1⤵