Analysis
- user interaction
yes - max time kernel
70s - max time network
93s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
04/05/2026, 09:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
com.paranoiaworks.unicus.android.sse_141.apk
Resource
android-35-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target com.paranoiaworks.unicus.android.sse_141.apk
- Size 11.4MB
- Sample260504-ld45lsa14l
- SHA256 f6df26ffb13a17b3c04f6724fa4a1f171e109104886cf5945fe7a1c85dfd21fc
- MD5 294de1fc953e819310536b89d78aec91
- SHA1 5ccb4e44141097728f06a09bbb3279400545f780
- SHA512 1b79b0f74d4722363c6e71fb1b906bb03e527f7e5bae39d6f73c2243ff14bcec665580efd18091960d3365055b83a08ed032bbc1550c2c05af1530423c17d90c
- SSDEEP 196608:84EMCpgCwsVzENSFYs3VKWYlaAsRU+5LLbEFOyb0IZ7gSo/UyX7s:8GagAaIFYs3V2D/+5XbIFoU
- TLSH T1B7C622ABF7A42D3DC4769033098A1535363A8D35D6975707389C7A2938B3ADC4F88BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model com.paranoiaworks.unicus.android.sse - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.paranoiaworks.unicus.android.sse - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.paranoiaworks.unicus.android.sse
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.paranoiaworks.unicus.android.sse/cache/oat_primary/x86_64/base.3252.tmp
- Size 65KB
- SHA256 a2c433adac9949e697c9b0d367fcd68ac833f9d172a6daecb4cb137de31fe7ca
- MD5 6d77073ba628a0ebc02f0495c0172fb6
- SHA1 c72f776cb15b0053a763b7cebcc8fa98cad0d792
- SHA512 ac2908847f2e138fa7614240c03b588f19fca58ebfbee2eaea880a0b18576e783be41dffdfa40dee4ef99e46febb4b2906fc1cf28a0d514c787e62476d6d2d6d
- SSDEEP 1536:A4vPWmsqBeJZ6/wKrimjelKTjiy1oKJWyW0vQG:zAIwoiKLmyN0dlG
- TLSH T1A1536C5FBA539051C0EA7EF68E8A05D5FD75C46122472E0868A2933EB833F18DF64F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db
- Size 32KB
- SHA256 7e919e1e5fa1bec8201d8b7fd158ea915ad7b9e30dd33eb6110b6c9aaa97c098
- MD5 c9d3031571bdae20738ae120b93adb11
- SHA1 80e12cd563ee6fb9297dac53c594136b0c5c845c
- SHA512 45788f2c1fbafb116edc869a32040d8e153ecc506be6adaef59e321c2731653b222c7a8e519e9583b2b1c0fd1886c433a4f03519a405615864540b20ee885367
- SSDEEP 48:T6+mRmedfje8TSlXXL/8A1VlHXUrS7pRHBg/9Z/vl:O+fedfLWlXXT8Il3Ue7p7g/z
- TLSH T1D3E2D88337D42A19CACC84B946214B9E236DD53A99B72315397204742FE1D06EA7C4E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 512B
- SHA256 e91197ddddd702cd63bfc4a85cd68498e1b66ac8ebc68959e31dcb3443aa5394
- MD5 ab6801758e94f8f1d885b269e1092151
- SHA1 0829fd3de299a558e31aae175cc77700a6f55f9f
- SHA512 3bbe8d3b57600db593635de0ce4f0f8202c44ec44847bee799f45209509195398612b8951e48147aa636ff949eab46f4e4d0f52c66c2bf3fef50a03a6b93bdff
- MD5 SHA1 SHA512
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 8KB
- SHA256 0770a0773c5ccc57897f1d398a47afee9d04a961e103ae30e593ccf33542a05d
- MD5 a87db98822d1582a65b8c6e8084f768e
- SHA1 4f97dfb91c6b982c7bd635d643767cd5e6d12bd8
- SHA512 08e513f17c64d7b964c8e6652e8e186e285baeea59177b23951b7e710581aa50cfed2b21a21a72a2c6f67e822674896b515d2ffd8b583b24baf1f433128c5409
- SSDEEP 6:7+/l96in1Ofg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKj:7+twNfqLiuWdQoRmBEyPbQ
- TLSH T1DD02C08C77800813C81E1E77E0E683980D10EF5C8171CB8B055008D4BC0B4CCECB0F08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 8KB
- SHA256 ca29809c293da454281646d41c4025ffd4bdd1d819bae1e2ed85f983647fa73d
- MD5 190f872faf0da8eb070882653f4a0880
- SHA1 bb476acb01cc4bab896596f98225d85de1641cda
- SHA512 5012c6180d9431b3a0ca98b58f2793754939460eec11125506d94452b4c1da05189670e346a40619ffd6de9ce7e52abb7fe1c5596abcbba48718e2dfb5c735b9
- SSDEEP 6:7+/l9eHPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuK0PU/1:7+tEvqLJdvloRmBEyPbt01
- TLSH T1D602C08C7FC10803C71D1777E4CAC3981E10A7188333CB1B055008583C876CCEC90D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 8KB
- SHA256 50fc07428de9d8b232e7cb10396e8af13fabf3170a8dcf0cc0f06befda41dd65
- MD5 77f3d67b80a17dd560f2f3bcedcff1b1
- SHA1 81e3c818ee3c3a1929120cdb1a3fd48a384ffb84
- SHA512 3e37a65465df4a07ed1b4ebd06c743f14e16eb025804cb1e535df19bda5970179c0e1f2556854bf34dea3cf0e73dc6eff5ddcfd3ec011be97e7ca83bb1ff6f43
- SSDEEP 6:7+/l9m7g9bNFlqalXill9h+iEoavLu4k66HFbNrKVaERX4PBX4ogLugMBX4suuKH:7+tyqLpXy9h+nov4z2b8vRmBEyPbvHY
- TLSH T13202610F76003503C98A8637B05B11D619BC533941B3AB532E3265217E05BD8A8E3DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 8KB
- SHA256 20502dca67e10352592d4c2a070b3533307142881b46a9f0b060d6f8db099b6c
- MD5 188ace461ee737ff34c3b12383f26048
- SHA1 f8578c975825f2745e3c118b978474e0ea95491c
- SHA512 25d40e9d285ed6e33d982ba8c0aaebe83bdeb83f18f752d479a47d0b76b993764497b5b5a8f214252907c7af4b3e5e1cd3d0b61064a2566e9850c2bf393663ce
- SSDEEP 12:7+tkkqL/rhGDhpqaycEby8dBpRNlHTov4z2b8vRmBEyPbjd1:7+tkkqLoy4edfZte8EGSb
- TLSH T11502100737102523C2C545FA643386EF1BBCA33E45A393032A7278755F46644619DCE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.paranoiaworks.unicus.android.sse/databases/SSE_APP.db-journal
- Size 12KB
- SHA256 29beca4108d3fbfd666e71117aee21718acec9f1dfe2645fa0102e7ba37e9cfa
- MD5 76d5892367038797bce81d5554d21bac
- SHA1 f2ff6c3a3cf889848151ae2c3652afc9ba062c82
- SHA512 bed8680c267f020282ff526fbe073e171c0cae3ca313502ea862f2f82c248cb755e9a8164b33a3c9b5599c28dccc199f5885937046aaa2594c15827f2d2c07d1
- SSDEEP 24:7+tAaqqLTmGhs94edfZte8EGS6WqLTmGhs94edfZte8EGSS:7MOqPmRmedfje8TStqPmRmedfje8TSS
- TLSH T16F4200433754291AC59944BA523289EF57BD933F48A262002E732C686FA570193E88E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.paranoiaworks.unicus.android.sse/primary.prof.a5MPRp.tmp
- Size 1KB
- SHA256 ae162436e67ee67798a72297e67720b01bfb42c1db771970e942620920e51a8b
- MD5 ea270e03e810644a38829b39f7c1c6a4
- SHA1 2ced79e5d846260a6264467ae231e40f4af00164
- SHA512 13a2ddb05bf72dcf68fca0e6f9f5815b168ac2938bee5b9a307f3f1fd46d969ef205f85b8cae0e7bb0a7bf98f2150ff835d99120a416cbbddda49cda504686b6
- TLSH T116210B2EC6AF1779D1FE2D334AC53151F254090728AF9B473A14325B1C125543007391
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/media/com.paranoiaworks.unicus.android.sse/1777886786251.testfile
- Size 1B
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512