Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    08/05/2026, 12:18

General

  • Target
    Emperor268_0.0.1.apk
  • Size 5.4MB
  • Sample260508-pgqceab18l
  • SHA256 65c96b2ec4f3045b1a68ea6a3d6e731db0bfab8d44e87701676ffe143c6e5ec4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.asiasigma.agentEmperor268
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:5114

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.asiasigma.agentEmperor268/files/profileInstalled
        • Size 24B
        • SHA256 596c175261a4def69d2569e40a306def9decba6f3dfa8aba9d7abe031bafd6e3
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.asiasigma.agentEmperor268/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 1fe4f6ceedbdd540a66aa1ef1f38e75a3e96b6616d58d16ae641ceeff6fe8836
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.asiasigma.agentEmperor268/primary.prof
        • Size 2KB
        • SHA256 272eda9ece0958b8b0fb9dddca2be0497440b9266c27208e3f95ab5930f294a4
        • MD5 SHA1 SHA512 TLSH