Analysis

  • max time kernel
    16s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    08/05/2026, 12:18

General

  • Target
    Emperor268_0.0.1.apk
  • Size 5.4MB
  • Sample260508-pgqceab18l
  • SHA256 65c96b2ec4f3045b1a68ea6a3d6e731db0bfab8d44e87701676ffe143c6e5ec4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.asiasigma.agentEmperor268
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4312

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.asiasigma.agentEmperor268/files/profileInstalled
        • Size 24B
        • SHA256 5064ed9da703da9d8399831192e3cf67002240733acdc1990ca8f29ad225390e
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.asiasigma.agentEmperor268/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 7ed92d7438cfc59e4bd33f48e528f7a761b3d48594bdf5dbbf3d90db6bf30a4f
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.asiasigma.agentEmperor268/primary.prof
        • Size 2KB
        • SHA256 272eda9ece0958b8b0fb9dddca2be0497440b9266c27208e3f95ab5930f294a4
        • MD5 SHA1 SHA512 TLSH