Analysis

  • max time kernel
    104s
  • max time network
    162s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    16/04/2026, 00:16

General

  • Target
    ARWSG.apk
  • Size 8.3MB
  • Sample260416-akyevscv7m
  • SHA256 4bf1339c9d6a1d382dd09beab215141923ba9e20f08d95cdf47bb124bba629ef
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.odxoodq
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5096

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.odxoodq/files/INSTALLATION
        • Size 36B
        • SHA256 f4b1622180819ed34f20af439b785eec107b8a169a06f823e1781bc309ba9ce9
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.odxoodq/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 6b5ca6ad052fe97b9235437b94555bb948683a53565d111b62b45aa80f2ce4ab
        • MD5 SHA1 SHA512 TLSH

        splashpage.json

        • Path /data/data/co.median.android.odxoodq/files/gonative-config/splashpage.json
        • Size 3KB
        • SHA256 d1d19c50f9e135d3ddb1e554abe98f26ca0ea9dd3b473ab5b920ae5c710a95ab
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.odxoodq/files/profileInstalled
        • Size 24B
        • SHA256 c8adcf56cecda2d4b85e845cdee54fa1a82967d0eaaec0eb68cb499caf4472fc
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.odxoodq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 71dd9c79e9022d93abdc9da91d7dcf5b45643ec0884b25a935433d3df58442d2
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.odxoodq/primary.prof
        • Size 2KB
        • SHA256 dee74f0079c704c2e4b5221aec80e64351af7d32d704986216e78f0a38209ffe
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.odxoodq/primary.prof
        • Size 7KB
        • SHA256 a56691c9f84dd9e5e00d99459c982e036b3a9a0586ad9e4cec0cf43832fb70fd
        • MD5 SHA1 SHA512 SSDEEP TLSH