Analysis
- max time kernel
143s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/05/2026, 12:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Nvmslot898_0.1.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Nvmslot898_0.1.1.apk
- Size 5.5MB
- Sample260519-pdhhdsfx2m
- SHA256 7f115ccf6b29b3fee929bdc10d52c97af88212a5bc0cf84e535828477d0bd305
- MD5 70dd9f1aeebdd7a0c4d25df54c776e92
- SHA1 733f5f7dcc532220ac8c4fd00e3496e5170ce663
- SHA512 74994522f92a284891f8613defcf1273ad491ec0924233fca2249eace636d13aa38eac58e3dc5349983751fcbde44e782c1f5f3b98c7ea7bf0175f57f9c5fb0c
- SSDEEP 98304:mLavvBHW9/dxU7ezQ7oyC4rDDmpEbU/7Iqpppmec7BZ348QT2c9N42d7h70ocoT2:mLwvBHCQ5C4rDQGU/050rT1N4Gt7K
- TLSH T1464601CBFBD8992FC87B00B2C96E52B116578D028A839F43AD54361C68776D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentNvmslot898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentNvmslot898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentNvmslot898 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentNvmslot898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentNvmslot898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentNvmslot898/files/profileInstalled
- Size 24B
- SHA256 9336573470463f1301cb96d68b83e7bf2f24c06ec455b1b17d1609c5d9fc60d6
- MD5 7c91673e617103ff47fc0fdcb97da4f6
- SHA1 46023a3a516c4574989d71ece4268fd71bf60ebc
- SHA512 d11fa12f5d3577b274b5d815fde91f5d38acbfebf0529cbb815adfc86f4c1637dc9a4ccf95ff6781a2b34ce29a3ae1e4c015dc9d99454dc8b855369527110488
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentNvmslot898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f632ea85b9203f6c7036926e13257bead378177cb6870ea0b055032c9a1c1401
- MD5 bb89cebca61aef36ce7af941cd81e803
- SHA1 b942e72750069db20806c9cffb6ad55fc0be7df5
- SHA512 366d3f17c790d0aa31110c22145da952339e350264ec38a2ec3e2c8a13ed43dd5d4cdcf7c5e8edc13068c1d11213822eb52184440734050a7cb59f8d78109629
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 2KB
- SHA256 247a022e9eb9e4a91ad2031c70689ab4b70d9dac3b377e00b24afb4f1c056617
- MD5 aa32da2ff97cf20ca4052557d7c9c078
- SHA1 d08e86830298d94d01778d96367e7bdace95a20b
- SHA512 30cd50bc494837bec55aa803d0da343b5d6b1d3a17bc7c0021531b699112e1ff161495806bdc618be688a659f1df4d74ff6b88b79b9b9caab0bd3f4a5f91daa6
- TLSH T1E3510A174944D4F4D9A25AB07E52805C13630F8BDF6A2868353D872359CA232B0795FA
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 7KB
- SHA256 c488bf89daa69f40453cc81b446afc4558255e5ef4e6f2eabbde0b2e23762f59
- MD5 023d7c0061d1ea74c975861cbcd0262c
- SHA1 8d4093e584bee5053ff35db2694b88e73469e0f9
- SHA512 0b14240fcad6a590c1d7fe924175b72ea5056fc9db31b7f440d6e267797b06fd45864a6d609fb58f2f93905bbe00e5a280cde888d407b03a1b7560e557bcbf7a
- SSDEEP 192:wKBG2laPZNlEt0ANPuuyGqxxd5ynXMg/QxGK9JaNmrH:LBXla0lJ3yGid5ZgI8o
- TLSH T19FE1903949CBB734F66B695E65A23B52055089B1E2F9F63A300F3C61265C334C78EB36
- MD5 SHA1 SHA512 SSDEEP TLSH