Analysis
- max time kernel
46s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
17/05/2026, 12:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Pelita168_0.0.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pelita168_0.0.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Pelita168_0.0.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Pelita168_0.0.1.apk
- Size 5.4MB
- Sample260517-pdtwesf13s
- SHA256 714117155d7049a5c3f74b784fe5a4ad87a9d7868a2228a542346bc79a411a59
- MD5 9887930dbdc968cb420b06a44438fc42
- SHA1 cf1cfdb4b467c2a764f6f6111fa553e9337d6156
- SHA512 f7f0a0e60d683ebd103b195ed46af6660d14c511a70e1ec295f7daaf7cccbc9c62b0ebe11355ebffac5622e5715563e5b78303f3735e89af55315e328e1f4161
- SSDEEP 98304:nX2ZlB+Bt0o5pgAuA4i9+j0ahRRSpppmmJJVg6LKt2c9N4BdQB9QoTYrFP:nX2ZOV6a4i0waXRMVgSS1N4LQW
- TLSH T17B4601C7FBD8992FC87710B2C9AE52B112574D028A839F43AD44361C697B6E41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentPelita168 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentPelita168 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentPelita168 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentPelita168 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentPelita168
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentPelita168/files/profileInstalled
- Size 24B
- SHA256 0680f920a1c24d00c1854c5af0408b8966224ad3d1880b925424b0df2f6484d0
- MD5 f6bd43b2e35df96a19b492f17573b9e9
- SHA1 ec482ca60f7ca8d386d30054bb47c31c28a7accd
- SHA512 c3ce7e91d4231f17356f5b1f153f7e84e6f42f0e056ad2e3485d8945921c2952f907f79f7b9d2749ee4c251e2e25479c6c5c6b48eed68b7b5a126ee54b27d0b4
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentPelita168/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4dc853b119664b81a11f8c224aeeba059d25453e741c38ae49b380b942aaf6c8
- MD5 f3f9bebaafc802e35f99f7876ba37765
- SHA1 4f94c9333aa5de6fb15eee240c04f4ef35cc9b0b
- SHA512 f5c2eaf0a67902e90a29a13d12c668bee8475f59f00a0e82f427be3dde776b832c660d4c9beeb3a4196ac45d262eefb01415099b733d09c515ddff963544858f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentPelita168/primary.prof
- Size 2KB
- SHA256 ce8a24b868c3f183f370b642d869a2734c7b32d275f1dd4b8ad2271f52e48823
- MD5 686db86677e792d5732fd067edd8c340
- SHA1 36118d3d89c3bd88f35225d0acc89b6033348891
- SHA512 b2a9b78d794e586852a703546badd22aaf3d490ce97e15367b1e38dbea30c9dd6a896f9c3ca9d2eabcd7a4dfbbec9f2eb54fa89b4bca2c37cae3a2d35d501dc8
- TLSH T175512C4B79DD63604B2B4A172BD244044605D75C41AA6D613F448A7718C26BC76EB53B
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentPelita168/primary.prof
- Size 7KB
- SHA256 92a474d78440fe2cf76aaea09be0b55514c4867d900cb45e139cc1a538e6b409
- MD5 eed92b2364a660d8c8d5355518c2f2d1
- SHA1 5313a58133c770110768023f694906fcced1a972
- SHA512 5182387a12a2887064e8dbda89eb2de7cfac07fcef7f0617d59a1ed0ef6660b5db015c990c891ee6e795a37c08f58f29d51cd8c368abb9a609967c9298ef575e
- SSDEEP 192:wxd9ucNFIH9cej9jAyD733gqyNYCLS+ubgsE8Pbiu1FO:C/IdX9jA4TwqyNJ14BE8Ti0O
- TLSH T10DE1B0A386DDFD35371197B94951388F658A5C25B5F28A3770720C4F1B7164161638F4
- MD5 SHA1 SHA512 SSDEEP TLSH