Analysis
- max time kernel
68s - max time network
155s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
19/05/2026, 12:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Nvmslot898_0.1.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nvmslot898_0.1.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Nvmslot898_0.1.1.apk
- Size 5.5MB
- Sample260519-pdhhdsfx2p
- SHA256 7f115ccf6b29b3fee929bdc10d52c97af88212a5bc0cf84e535828477d0bd305
- MD5 70dd9f1aeebdd7a0c4d25df54c776e92
- SHA1 733f5f7dcc532220ac8c4fd00e3496e5170ce663
- SHA512 74994522f92a284891f8613defcf1273ad491ec0924233fca2249eace636d13aa38eac58e3dc5349983751fcbde44e782c1f5f3b98c7ea7bf0175f57f9c5fb0c
- SSDEEP 98304:mLavvBHW9/dxU7ezQ7oyC4rDDmpEbU/7Iqpppmec7BZ348QT2c9N42d7h70ocoT2:mLwvBHCQ5C4rDQGU/050rT1N4Gt7K
- TLSH T1464601CBFBD8992FC87B00B2C96E52B116578D028A839F43AD54361C68776D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentNvmslot898 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentNvmslot898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentNvmslot898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentNvmslot898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 43a9f85498f4970cdc1d0ed9364392dc1677837562f334ee199e0b0bd279f711
- MD5 deade61c0c0e8ef34ee8497e3320ed10
- SHA1 355e24c4e68cc00d7bb1e2828ea4838f404124b1
- SHA512 fec0fa8f74a61cc31ba8ee7ce8f1a7b2c1bbcc8fab4a447fa2874db9e56e94a7b8c20453060a009bf48a08a88482254a428d52a6307369e55b20ee991435384b
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 2KB
- SHA256 247a022e9eb9e4a91ad2031c70689ab4b70d9dac3b377e00b24afb4f1c056617
- MD5 aa32da2ff97cf20ca4052557d7c9c078
- SHA1 d08e86830298d94d01778d96367e7bdace95a20b
- SHA512 30cd50bc494837bec55aa803d0da343b5d6b1d3a17bc7c0021531b699112e1ff161495806bdc618be688a659f1df4d74ff6b88b79b9b9caab0bd3f4a5f91daa6
- TLSH T1E3510A174944D4F4D9A25AB07E52805C13630F8BDF6A2868353D872359CA232B0795FA
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentNvmslot898/primary.prof
- Size 7KB
- SHA256 0db4676560e67797940ae56afb43cb5f0a905bbcecb3a575339228e16716fc85
- MD5 b86037ebab82380ca9b229994af9e683
- SHA1 669218a976858409cb1e70bacaae7121f9ad2fa6
- SHA512 1119e0bca8704fd5b0337b3b04384cc2df2cb58485c325faa18186978459580eb16d083bd5931c105704f7c1aa79f28e2d082f87ba1d4603bd1a9a1c23513080
- SSDEEP 96:3NOwgT2DYjzp41+gIuQi6u/XnXJh0laHi3XDCjBjqbGq+YrWUiiJr1Mg7QjoPo:34w2Qwzp4A/uvJOlamXDChqbGLiTkjuo
- TLSH T1CCE1B00B57717F494CC8D0D4452CF70320E178788898D8B7ACDF0879A9BE6385DD7169
- MD5 SHA1 SHA512 SSDEEP TLSH