fantasyhub | 2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31

Resubmissions

09/03/2026, 18:10

260309-wsf2facs9110

09/03/2026, 18:10

260309-wr7srscs8w10

Analysis

max time kernel
97s
max time network
101s
platform
android-14_x64
resource
android-34-x64-arm64-20260306-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260306-enlocale:en-usos:android-14-x64system
submitted
09/03/2026, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk
Size 8.2MB
Sample260309-wsf2facs91
SHA256 2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31
MD5 00d9cf98baa6178949969d3471691dd4
SHA1 f702f56ebcb68301508084a6045925b34c49c274
SHA512 3f648b8f3c92e4015e9fdb8c034042b15e2522e130225ee5d3f0109385646e912dcd004f8b987ebcf8b23fd15709a6a927b24df27d949785ece6662fa3901b2e
SSDEEP 196608:64jSh1dNhS9hLoukJaWL7+RkS4/UwzG2iNmKr:9M1dNhS9h8b777SiiEKr
TLSH
T181963396F729A52ED97B41710A8A473223669E09CEE7D307A1543B2C783B3C98F44FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

banker collection credential_access defense_evasion discovery fantasyhub impact infostealer rat trojan

Malware Config

Signatures

FantasyHub
FantasyHub is an Android RAT first seen in November 2025.
trojan infostealer rat fantasyhub

FantasyHub payload 2 IoCs

resource	yara_rule
behavioral4/files/fstream-8.dat	family_fantasyhub
behavioral4/files/fstream-11.dat	family_fantasyhub

Fantasyhub family
fantasyhub

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.pc07b68963.ikk18

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.pc07b68963.ikk18

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 22 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.pc07b68963.ikk18

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.pc07b68963.ikk18

com.pc07b68963.ikk18
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4686

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

chiken.apk

Path /data/data/com.pc07b68963.ikk18/cache/chiken.apk
Size 15.5MB
SHA256 8705c9b738bac60713fbb93b31f02fff061fcaf42ec26ec62400438fb844bb32
MD5 4d5b295f47fb79bfebb3a490b3079e4d
SHA1 628dea0a6d6a4f3128a22b4867392c16ef759a5c
SHA512 88fb9530d4171a80b9cd082fc949f2616ca44cd70e6ba84cd88251e913ba063851ed2ef47d33f7c32bec7153a4a0194cbbbcdad1eb7ce8ece4b78d2d29d7ecde
SSDEEP 98304:kptSYw5jF8zChrH/VxcrUod6D4YVQsQukgZBW6Di/5vRERSzEYmmmYu9Zs5PnAP9:kpt4jF8eNYUnwupvW6G/YRcn41bL
TLSH
T119F68D0BE302DA26C8DC7B3C29B657C637316E4E9F8343635058FD6D9E726E59B24290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chiken.apk

Path /data/data/com.pc07b68963.ikk18/cache/chiken.apk
Size 7.0MB
SHA256 15cd5bbbdb9e5f980043bcc849a66c8fb77ba4af44dacfdc653e2488622b2408
MD5 c2b8c31f78596501d1c08e2088ff0429
SHA1 7337390ec0f9295188b447e405a28f6cf9604036
SHA512 1cdd95520bf949bc334457b9a86fb6bd995df0793bdc0c956908aeb0f1c190c4125fea3100310ec92523336a98af8d7ec4faddc316c7f7944031e26d67ae4198
SSDEEP 196608:UAQlEJfbk00qJNQk6FWE9JIKXFtunVhDNGC:UAAUkNQQkhE9JIo8V/GC
TLSH
T127762386F728013FC5B644724AA6033167678D2A4ED7AB4B2988772C9D7760C0F6EFC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chiken.apk.signed.tmp

Path /data/data/com.pc07b68963.ikk18/cache/chiken.apk.signed.tmp
Size 15.6MB
SHA256 bcba10a5cddb861712fc0e9168ae9da4c986607866d7fbb12a8774ce5c0bbd61
MD5 f11f4a68ee557e900c4104382fa68bd1
SHA1 830559676bdf24cf5f3d27321df80dc2a9200e5c
SHA512 3d52f8a1cad67c3ee69cdea9d61e5503fa0681af876ed443cc50657f4067a0c91f167c77c26a3542af3d6a2bf21616563329ec76442cee890ccc6534ed05e9ff
SSDEEP 98304:mptSYw5jF8zChrH/VxcrUoL6D4YVQkQukgZBW6Di/5vLERSzEYmmmYu9b6bPpo9x:mpt4jF8eNYUJCupvW6G/eRcB+h5Bv
TLSH
T1FAF68D0BE302DA26C8DC7B3C29B657C637316E4E9F8343635058FD6D9E726E59B24290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chiken_patched.tmp

Path /data/data/com.pc07b68963.ikk18/cache/chiken_patched.tmp
Size 15.5MB
SHA256 3d638cf3d26ed786fc48f14911a316971c19657592388d4881a41a39414d8cf7
MD5 50db57d34c8bc70db1a323033a17a15e
SHA1 2a7cef71003809a1c3819c853f3b5d9c2be6521a
SHA512 26a6db8db4fe30b767fb6af0f40c4fb31e5e0bdb0277bb2e8f387c79ec39b9cbbfc8a36c2fb585f41e91defdffd3957dce60fc4911053fcaf6511291a10fbc25
SSDEEP 98304:hptSYw5jF8zChrH/VxcrUoQ6D4YVQsQukgZBW6Di/5vRERSzEYmmmYu9Zs5PnAP5:hpt4jF8eNYUmwupvW6G/YRcn41bn
TLSH
T17CF68D0BE302DA26C8DC7B3C29B657C637316E4E9F8343635058FD6D9E726E59B24290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dog_patched.tmp

Path /data/data/com.pc07b68963.ikk18/cache/dog_patched.tmp
Size 470KB
SHA256 526131f4e78ff126f1ea5352a35dbbbf30e32b3a348cb84311fb06f4759e758e
MD5 ea7a7a8c672458d533b25f0f5f3265f3
SHA1 77e9380c175344f226ea0cd88a296e49aed9b147
SHA512 432dc022b601adb4be8a93ac969029d2f842136b651c27615636b209a215c63ac81b1d8fd17ed50fed4b961b0ea411ea3c22a8532138a48606504fa072662c7f
SSDEEP 6144:zodf9exi7x2lV5RMFs53cogD53Mpd39RCjBDTQj3:zoT7xsvMs5Mzmp+DTw
TLSH
T198A45C06EA904E33C4AE127D45A31780373AA949AB43834B320DEA787FB33D65F975D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dogandcat.apk

Path /data/data/com.pc07b68963.ikk18/cache/dogandcat.apk
Size 439KB
SHA256 cf9dea7dc62717e4b239f0595594ec4211252e3d8fad46b1b59061f698801993
MD5 42a73d34ac66b8df192973a9edf9cfce
SHA1 c2e1ab09d343fd13d1757087d17596e781b12504
SHA512 49d5c35d50d2d7d87ea99fc1bddb5b5cb2b7c7222785b7b217c566e3249d9bbfa053decb5bf2082eb798c67269ab290bd0c8156d7751afb7aec062416e1afd39
SSDEEP 6144:modf9exi7x2lV5RMFs53cogD53Mpd39RCjBcMpcq3n:moT7xsvMs5Mzmp+cMpr
TLSH
T1C5A46C06DE904D33C8AE227D05A31390373AA689A743834B260DD6B57F933EB5F876D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dogandcat.apk

Path /data/data/com.pc07b68963.ikk18/cache/dogandcat.apk
Size 470KB
SHA256 5b5417ce2b0fe3a576b079eae4c43d22f4c4bf2cd907f6f1c47f955eb8eb6aa4
MD5 a70a6dbf85c9236b503e42f566d4cf7f
SHA1 d9d973ec3cda31bdb6b512389676327f1fd90fe5
SHA512 bd4d769f86999b1fab89b83ef8c0dd089ce2e76810dfa4ddd087dcbdcaa417cab45d31808a37668727ec5024f3b1e199f0ed6f579b938bfe1b1ba7b4814d40ca
SSDEEP 6144:codf9exi7x2lV5RMFs53cogD53Mpd39RCjBnoH81:coT7xsvMs5Mzmp+no4
TLSH
T1EBA45C06EA904E33C4AF127D45A31780373AA949AB43834B320DEA787FB33D65B975D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dogandcat.apk.signed.tmp

Path /data/data/com.pc07b68963.ikk18/cache/dogandcat.apk.signed.tmp
Size 483KB
SHA256 1fb09e8b52db6f0e6a3f97a9dcbdfd73b309b2b774bdf0927209b63d79a3b10b
MD5 ad929111490d09a66cb3b5d08b53f49f
SHA1 b5e7797c9985fe73b247c00379bb0586cceed94e
SHA512 f445ebe8f36c2a0f3395c1fb86f0dba9823c1c52b103c1d342bd6cc56d491cd1d321131d5768d8aab5c5d62117099de16db8a5d49cade46ba55da0d91e757419
SSDEEP 6144:codf9exi7x2lV5RMFs53cogD53Mpd39RCjBH874Ii:coT7xsvMs5Mzmp+H82
TLSH
T103B45C06EA904E33C4AF127D45A31790373AA949AB43834B320DEA787FB33D65B875D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.4686.tmp

Path /data/data/com.pc07b68963.ikk18/cache/oat_primary/x86_64/base.4686.tmp
Size 152KB
SHA256 5f6c76c4dc615cf13927b41a51c635cc561bbd39ffc0da9bc5f21f6e87d866d9
MD5 fc7e5e82c50e47ff334f06153596280b
SHA1 ce48213aedfb40101e857635026b6f85ce71742f
SHA512 0c0214159a53a11ea651f4cef9813b4d99df79273b8b146b156b558c4d2a35d050327e419361d8a7e6ac067668682226988a7b3877cba87f07bbdfb5b8b11dac
SSDEEP 3072:tnq0QsdCmewRPtg8qnghLZ5R8gNqNAaeRKCO7FUviD9WHyAuKghhb:lbePTS8EiAbRKCOJoiDQyAuKgh
TLSH
T1F8E33C6FA662C091C1BBBDF7968A06E4FE7B406016163E045072B73F6912F14EFB1B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.pc07b68963.ikk18/files/profileInstalled
Size 24B
SHA256 481ee0f58d6808a8962df6fdc64dc79e0ca58a2fc9aa4bd996e1ef7b13aea388
MD5 1e70221c9d0d168345de86d06d2d53b0
SHA1 e03d2be3074c274a9a7e546ff4161100bcd49b75
SHA512 874bc1bf8e591f829d9cd9612f8087fdb3ee69caf4416815c80118bfd3b3e71882d1baad48d0463b397d62b23dd7d22b6aebbdfebc974757516edb2614af6932
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.pc07b68963.ikk18/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 4977ffc0860b3d787c52bfe45fc466cfb4057495b4f88ae7359c803e6ffe2b62
MD5 13abe00674d7d83356487197bff1a018
SHA1 b5466727cb84fecdf17a30ea3e1e83e890c9431f
SHA512 3a5139beb6087add07efda9815f7dd3f9b190aac4a325e7ef932384d34cc64bb0a859e390b9433edc538f2bfe69de4228b8c669e97ba675908263e945eb6b0bd
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.pc07b68963.ikk18/primary.prof
Size 1KB
SHA256 47dd0c2d2fa68ff79daec9327eab0d871ba01d401daf009cd6a9eebdde3ac64a
MD5 b736960a663670a9fe93bd1a83e34f4a
SHA1 c6c2f3e7d8d19f14e5e69fd4cfaa8ef3fe21594d
SHA512 c4bcefb697801c400ca7c297b67f1b88ce130b0e1a2129724c4e65df30dbc2fd19bfc16281a3b91d936a558c8c6be135d9be80953c94515c7fba0b0e9994047f
TLSH
T11731DAC915F43652D825AD7115C490D3497D508AF496B850FBEC76F2485490CFDFB60E
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.bVtlXH.tmp

Path /data/misc/profiles/cur/0/com.pc07b68963.ikk18/primary.prof.bVtlXH.tmp
Size 2KB
SHA256 03cf109113fa96d1114736fc9c9697a736c9cb4268f9bfbf065ba10ece9ea45c
MD5 b4fd2f265ad20d6e663850bbe6bf11e1
SHA1 396599661b278409737ad641f1523b3dfefa82bc
SHA512 f94e84f5ef6432ce08c42ae600f7f98d42e83cc1f2e2a972b9a5d0671ec0bf6eb841c486a415f5aeefa50f2fe15c23263a5590d13f1d8bae181a8f2b4c35755c
TLSH
T1DE515C0131C1C02DC1FBB83A64F54B9C65DC72DAF8C9604AB3F70796946BC624223849
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads