Analysis
- max time kernel
46s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
23/05/2026, 12:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Auroratoto1_0.0.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Auroratoto1_0.0.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Auroratoto1_0.0.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Auroratoto1_0.0.1.apk
- Size 5.4MB
- Sample260523-pcbcpab15w
- SHA256 803755e9858921b7c061bee0c1be2ee6058ca537fe9761e6b59aafc9b3dd23e3
- MD5 8859c514b634d9274dd43d343950228e
- SHA1 088c75b4ad79931c793d75748a555aa2f8d55bcd
- SHA512 e19e033aa494e05132c4b23a77ab37ecace1528a9071d5483d4f9eba60bf8a8a484935c503a0ea47e8e60414d44ddb48a9badbc4655f6ddef6f30cdb607f6ecf
- SSDEEP 98304:pDAlQP89Q/FSNw2eTkpohPfbtppppIG8DjMz66Yc9N4sdIQCXoTYrFY:pKQP8lNwJkpwroOjN4oIa
- TLSH T1564601CBFBD8592FC87710B2C9AE52B166478D028A839F43AD44361C68776D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentAuroratoto1 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentAuroratoto1 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentAuroratoto1 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentAuroratoto1
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentAuroratoto1/files/profileInstalled
- Size 24B
- SHA256 6a9241a8250bdfc0aa3b6cd1c4c4f8f3d10ac5fceaa2c6c448ae93e09f01359a
- MD5 ad01e0c03ac0204846b74b5916a092e4
- SHA1 3a48e67fce96e06db5e0d6e37f4563303ebf4947
- SHA512 c9f9350f98835a033612971ed9ba0ce7aa838a494844a372c1cce337ccf408a08e22de6e966aad010e215c041391026e134a92caa9b6739bce0e06d508dc7013
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentAuroratoto1/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 cba651139191628e5e209f9deb43d04a5c933663ea71c8fc0d0ab65274682a84
- MD5 3692fdc3d6015759a7fd736f7c852453
- SHA1 11c526b3cb4847ce603edd2354086e29e32c7f77
- SHA512 95b376a73b01881bdf518d4f96d5a7a307db5f665c2583003c2798bc6ea357343a5ba44557eda6fd4ce27c7edb86c720ba1556caafbaba1d277d907394d8db26
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentAuroratoto1/primary.prof
- Size 2KB
- SHA256 a1d49cc307bf1c5bb5a516b2e711ddf0b33cda8cee5ba3290b3fe1edb667b4f9
- MD5 8694349721f9eb7e22fddf79f60db757
- SHA1 b4d4f963ba8d34db12ff24dbc9b05ae9de4454da
- SHA512 940ad9c9c72533a648278418a752f8c5b1af12134637ce5a123a7a97568a145686fef1ebbd9ff4276e78e38e384bf0989c1d494de5c80c4670482214dfc03177
- TLSH T16B51196B2DD2E50109A80E146E778DDAE1B3234A6BDA5C78C222C41BC483774170AC00
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentAuroratoto1/primary.prof
- Size 7KB
- SHA256 462db51505d1ea5a851a811322a77e3083fffe30f69d021eef0676f7f5963986
- MD5 43ebc8fe1e3e39af5d349d7452f4d51f
- SHA1 e070c9a63123cbd97b36b3c1b8beeafb1ed09c92
- SHA512 93b9c47879a601f3a07ed09c18ac19248f59009f5bde3caceeeeff357caa3ebc03240391992a99427fddcae77fa107ebb38715a7a3e9f522add192ab6e7b36c8
- SSDEEP 96:bQbU7uwU0rSBzoH97597dEHI92XqRdA/fjfNhouXCwYBwiu1RQY4SCIf98sJ9oDQ:bQbU6wUZsH9REFqkDLKlBbSz9VqDX/4
- TLSH T136F1AFD5B0E4E2B1DF1936DD3C00E58DA931113B50F5A1F63A40D1E0416FDFAD132A49
- MD5 SHA1 SHA512 SSDEEP TLSH