Analysis
- max time kernel
2s - max time network
303s - platform
android-13_x64 - resource
android-33-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system - submitted
17/04/2026, 00:06
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
android-latest(1).apk
Resource
android-33-x64-arm64-20260325-en
3 signatures
300 seconds
General
- Target android-latest(1).apk
- Size 15.8MB
- Sample260417-ad4nasfx41
- SHA256 af9b79f72e501dee81de1c9bf44109b592d6eca31933a6a67f6ca2957384ec16
- MD5 8a876da15cbee13f87ad866d019d5271
- SHA1 aea6cb3c633becdb92a121cde924ad288e20024d
- SHA512 bf2944c41a4248564dc8e3322972c731ab916937a37daafb193f165090cde484039384983eec63c8613331f4e8ac93901f75be6bc4cd3117df3421a174269346
- SSDEEP 393216:ZtKiHFo8iJKkVYPddSxIWAWfahYjNhwJx0zxRbmrT3HdhT3QGv4:ZtZgKkVYPdw5FcYTiAvyj9hQ
- TLSH T102F61282F7954D7AC4BE933719A603102332DD419A939B477D48B268AF732DD1F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener org.vita3k.emulator - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener org.vita3k.emulator - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo org.vita3k.emulator