Analysis
- max time kernel
46s - max time network
156s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/05/2026, 12:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Auroratoto1_0.0.1.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Auroratoto1_0.0.1.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Auroratoto1_0.0.1.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Auroratoto1_0.0.1.apk
- Size 5.4MB
- Sample260523-pcbcpab15w
- SHA256 803755e9858921b7c061bee0c1be2ee6058ca537fe9761e6b59aafc9b3dd23e3
- MD5 8859c514b634d9274dd43d343950228e
- SHA1 088c75b4ad79931c793d75748a555aa2f8d55bcd
- SHA512 e19e033aa494e05132c4b23a77ab37ecace1528a9071d5483d4f9eba60bf8a8a484935c503a0ea47e8e60414d44ddb48a9badbc4655f6ddef6f30cdb607f6ecf
- SSDEEP 98304:pDAlQP89Q/FSNw2eTkpohPfbtppppIG8DjMz66Yc9N4sdIQCXoTYrFY:pKQP8lNwJkpwroOjN4oIa
- TLSH T1564601CBFBD8592FC87710B2C9AE52B166478D028A839F43AD44361C68776D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentAuroratoto1 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentAuroratoto1 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentAuroratoto1 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.asiasigma.agentAuroratoto1 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentAuroratoto1
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentAuroratoto1/files/profileInstalled
- Size 24B
- SHA256 0f21e70532581af37a0a62e95bafc91b99abf5aa307134e28465e476d4c2b489
- MD5 be8175ea5df2093ccbac0ccc0be50462
- SHA1 cd21665dedaade67bd1f5fbde5d6c6e16e04638d
- SHA512 cfabd37af20a9a3b85c8349caefb4d39c080a479551dbf2459c123a4edd0cb83295aa9cf20d9185d94b068cba65da3b3e56624a8b23c777ff75df48ef57e30cd
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentAuroratoto1/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e4b14a9b87757708468869b5e0db9ad5f88fd6aba4e762ad85c331f013d1966b
- MD5 81395f59df8448b648d396f64c736741
- SHA1 e36a4dea9b307cd917607876caf2421624f5fbdd
- SHA512 bbd878510cbd4605e1eb564de055a0f0fa184f79910654c20cc5bab813dc067fdfc509ee651a9e2a58ba46876cacd046dd3c2eca1bcf7154c7a6f3945614ce9b
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentAuroratoto1/primary.prof
- Size 2KB
- SHA256 a1d49cc307bf1c5bb5a516b2e711ddf0b33cda8cee5ba3290b3fe1edb667b4f9
- MD5 8694349721f9eb7e22fddf79f60db757
- SHA1 b4d4f963ba8d34db12ff24dbc9b05ae9de4454da
- SHA512 940ad9c9c72533a648278418a752f8c5b1af12134637ce5a123a7a97568a145686fef1ebbd9ff4276e78e38e384bf0989c1d494de5c80c4670482214dfc03177
- TLSH T16B51196B2DD2E50109A80E146E778DDAE1B3234A6BDA5C78C222C41BC483774170AC00
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentAuroratoto1/primary.prof
- Size 7KB
- SHA256 27e88ff92fa3ae5ab3c9fdcf3d872b8dc3b6944b649114073dd4b82b7c8a525b
- MD5 e4d84d215782bd37ab9e100817c47029
- SHA1 3eb7fb39c087f9d1381137f06009d2b1c32cfe49
- SHA512 94c39688e6d150f03d16f39e650205a5ddcac93275ab59be5e69cb52afdd74534d83cafdd63fa8e31c376e5350f7e54a5bbf9ce1b9204eb1455243774908295e
- SSDEEP 96:bwJlPmsP9W1KSFHYhuzFwQVcCAC/VYcQy0rN3ICd6Xvl7fCCIJijm1wzzvADZpyw:01/WsY2uFwY5nVY7FIDvyHEADnX1jMIH
- TLSH T1FDE1AE9F92FEF23A363D4B8F883216DF4DD919468FD1BA4B7071C0521056E5AC9A2D09
- MD5 SHA1 SHA512 SSDEEP TLSH