Analysis
- max time kernel
89s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/05/2026, 12:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Nvmslot898_0.1.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Nvmslot898_0.1.1.apk
- Size 5.5MB
- Sample260519-pdhhdsfx2p
- SHA256 7f115ccf6b29b3fee929bdc10d52c97af88212a5bc0cf84e535828477d0bd305
- MD5 70dd9f1aeebdd7a0c4d25df54c776e92
- SHA1 733f5f7dcc532220ac8c4fd00e3496e5170ce663
- SHA512 74994522f92a284891f8613defcf1273ad491ec0924233fca2249eace636d13aa38eac58e3dc5349983751fcbde44e782c1f5f3b98c7ea7bf0175f57f9c5fb0c
- SSDEEP 98304:mLavvBHW9/dxU7ezQ7oyC4rDDmpEbU/7Iqpppmec7BZ348QT2c9N42d7h70ocoT2:mLwvBHCQ5C4rDQGU/050rT1N4Gt7K
- TLSH T1464601CBFBD8992FC87B00B2C96E52B116578D028A839F43AD54361C68776D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentNvmslot898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentNvmslot898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentNvmslot898 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentNvmslot898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentNvmslot898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentNvmslot898/files/profileInstalled
- Size 24B
- SHA256 b2d218161489533cf6a8aa190aa3d06f4e2d52b22115ff847a8ed92b422f4cbb
- MD5 35dab6f550238ba9165991590005af60
- SHA1 0ac3c71e186c63846dcae6e3a16d3d30a2dc53fd
- SHA512 c21402483d1f7d9b01edcccbabaf7fd342a2fd9488818e414cf6dacc4b4767a787458611157e1a83e3b7ad1a35642fed08c0435085a25e44b3b77a058df0ee00
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentNvmslot898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 63617183bdbb90c51e45772cc889887420e74019b82b61808d190da17d9c8a01
- MD5 7507a4647449508c9d6c3b1b7f74f370
- SHA1 3ba802b66f132a50e47344479238609224ab3f30
- SHA512 3d257344beeeee88b39e236ebf9e505f982b11a6624391cf94571c44b99cfd5ec08fd3ba1cbd97c80eaad497cea22fdda84a54b837a9b3e0604d866e0ad2e19e
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 2KB
- SHA256 247a022e9eb9e4a91ad2031c70689ab4b70d9dac3b377e00b24afb4f1c056617
- MD5 aa32da2ff97cf20ca4052557d7c9c078
- SHA1 d08e86830298d94d01778d96367e7bdace95a20b
- SHA512 30cd50bc494837bec55aa803d0da343b5d6b1d3a17bc7c0021531b699112e1ff161495806bdc618be688a659f1df4d74ff6b88b79b9b9caab0bd3f4a5f91daa6
- TLSH T1E3510A174944D4F4D9A25AB07E52805C13630F8BDF6A2868353D872359CA232B0795FA
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 7KB
- SHA256 bb90a84daf8ae0e51014c4c77900f0360eed0eec7453a6118c37d5d4fe0917d6
- MD5 ff5e26f8c0e9c015fc355e57de444235
- SHA1 b89cad0e9b78d36d20ef92b2269a7629f2dd317d
- SHA512 1f920f8d2da4f6184bc798e976a763f9ea7a16718e8e5f8f4848b00ff02119b2ce77e05a1dd3b85fade1e30bfbf72d59e99d93cc50ed32e48f715e8cff2f79e9
- SSDEEP 192:E5Ai/3Js4VdDncOF0onvQlCMOvWUgZ0HRcbw0:AAWs4VG8nvUOOU9O5
- TLSH T1A6E1B072A00E5430098B11D9140F6DF834B70E7DAA0EE97947CE29E019ED767D3318E6
- MD5 SHA1 SHA512 SSDEEP TLSH