Resubmissions
06/05/2026, 14:26
260506-rrthxscy5t706/05/2026, 14:24
260506-rqqqmsg12n28/04/2026, 04:30
260428-e444zagw3j719/04/2026, 15:35
260419-s1bvxadz7m619/04/2026, 15:33
260419-szbhradz5l619/04/2026, 15:28
260419-swnznsdy5r6Analysis
- user interaction
yes - max time kernel
41s - max time network
903s - platform
android-13_x64 - resource
android-33-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system - submitted
28/04/2026, 04:30
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
mobiles.apk
Resource
android-33-x64-arm64-20260325-en
3 signatures
900 seconds
General
- Target mobiles.apk
- Size 49.6MB
- Sample260428-e444zagw3j
- SHA256 23793efe2fead8976587b5d1b5a411d256a674bd54504db8dbb815b63a6c9887
- MD5 e0b32bd54084c213e444c39ff73f11c2
- SHA1 e698bf3de08b528fc5bfd47b7e075c5d401d5f22
- SHA512 8999b0bbde89d63c33bd9d957405c6d8781f6b9419d9a7f8ff1f7e010fc56ef7baaaea37f7083fc1963b88ad0ba9d8dd91d0c1aac46fe7154cdd1c5023f12ad6
- SSDEEP 786432:2wHOXZuAtTFVLEZlvzNAcFj0WrZISiAeMYuCtEtg+Nb4ZSRsSTedlvEJPeHsvRFP:noZVqZpNb4XCws1eHspFP
- TLSH T1BBB7D00AE64DB812D9C6F13CAE4E47B2B22BBC859710C16A3C15365CF5F36E48F76660
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 16 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4496 com.moviesfongmi.android.tv /system_ext/framework/androidx.window.extensions.jar 4496 com.moviesfongmi.android.tv /system_ext/framework/androidx.window.sidecar.jar 4496 com.moviesfongmi.android.tv /system_ext/framework/androidx.window.sidecar.jar 4496 com.moviesfongmi.android.tv /system_ext/framework/androidx.window.extensions.jar 4629 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.extensions.jar 4629 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 4629 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 4629 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.extensions.jar 4780 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.extensions.jar 4780 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 4780 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 4780 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.extensions.jar 5072 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.extensions.jar 5072 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 5072 com.moviesfongmi.android.tv:error_activity /system_ext/framework/androidx.window.sidecar.jar 5072 com.moviesfongmi.android.tv:error_activity - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.moviesfongmi.android.tv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.moviesfongmi.android.tv
Processes
-
com.moviesfongmi.android.tv1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks memory information
PID:4496
-
com.moviesfongmi.android.tv:error_activity1⤵
- Loads dropped Dex/Jar
PID:4629
-
com.moviesfongmi.android.tv:error_activity1⤵
- Loads dropped Dex/Jar
PID:4780
-
com.moviesfongmi.android.tv:error_activity1⤵
- Loads dropped Dex/Jar
PID:5072
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.moviesfongmi.android.tv/databases/tv
- Size 4KB
- SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
- MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
- SHA1 fee434f784e73cc7916322e949f727caf8363102
- SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
- TLSH T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.moviesfongmi.android.tv/databases/tv-journal
- Size 512B
- SHA256 d9636ea1bdb8f6b0d2a130be1b0176404bcc59e713d28e184ceaf0852e35315f
- MD5 1d98fc1e7396d3c5429c63a31605cb20
- SHA1 7afe5c7c19c8c04ade287eb0a7530519e46c7955
- SHA512 9827eeb37d7bfead5d6059e507b8c1c7b89e531f49181cc483ed2b6081ad5b11189633e89dbb4d9fb5adfbd8c48e15b82139f17056bd65ea04d2aa3ede28d04a
- MD5 SHA1 SHA512
- Path /data/user/0/com.moviesfongmi.android.tv/databases/tv-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.moviesfongmi.android.tv/databases/tv-wal
- Size 100KB
- SHA256 67cfbfeec96ba6b0ee3494dd3d39066148d96eb776ca68f8143f788a6032d6e5
- MD5 95193688e9fd585e5b3c7217394e71c6
- SHA1 dd7eeadf41f7dba5eeb1ff489f8073e44077785d
- SHA512 322b2692750b35e7847c846904ff7391d9e6cef6aa70ff9d8b95526054b3a8a30e3a94d4ce0b95ea1f6d422982f2f1fa652e9030bbf92f900fc66f2d56c41075
- SSDEEP 48:RBpMzUSP/oZB2/XNtn66j/3TP3QQzvimpu1r0P3bmYlwGpMZheElBUYDGphbd0NE:nK1Pxs6r20PJYZlOqNrXIPU5iKFjE
- TLSH T1D3A3BB9F0F283362CCA991B1E8E00ED26E7F4B5EC3E7679614D45071BC83430A579AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH