Analysis
- max time kernel
116s - max time network
159s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/05/2026, 12:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Maharaja188_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maharaja188_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Maharaja188_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Maharaja188_2_1_6.apk
- Size 4.3MB
- Sample260527-pfty7sds3j
- SHA256 4e1ea44b93beb11f54a5f18c52e3b9f45c1411cd98fa4d4345ce89a49a3cd499
- MD5 226da487cf4903519d8455c7b779ca41
- SHA1 cfb75477758e8b86027d39db08c8faa44a6f5cd7
- SHA512 d844a2068f53356ffb580f45ed16fba97e484f90b33230ef59a670c1ee679443c31495b2f10f2c73d91b8da986e599b6797510f67d01bc23755a4ce746690168
- SSDEEP 98304:UFAF8ohFAbWRvviDy4JWtYRz3fVU8DYXgfzbPc12R/m9DTSi:YAP6WoOmWG3fl5Lc1JDf
- TLSH T188261242F769AA2FCCB7C0320AAA473552528E22C783E74B5458376C387BBD84F597D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.arena.Maharaja188 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.arena.Maharaja188 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.arena.Maharaja188 - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.arena.Maharaja188 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.arena.Maharaja188 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.arena.Maharaja188
Processes
-
com.arena.Maharaja1881⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5100
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 c3af8b9c876e0dd3bf86f35d6971368f55bb9611088ffaaac5861e3b8705184d
- MD5 6dbeab1d974ab269aef654422ef79859
- SHA1 55089a5600586216758072251a4caaa16234184e
- SHA512 19e3b3de9d367c7beedd868fa03f0b857894f663c953251512959551fbdd80c716ddb13a9fe99ccdc9e822dfc4a56deb327e6c3e5d1375fd7bb91f9dbb9473d3
- MD5 SHA1 SHA512
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 ca3834ef05c16d7bb81d3ebffe203aa84ff8fffb1b2805e5ea19d7b5ed326e4b
- MD5 dda7f9d7a00c22a3d742d5aa6ac775ee
- SHA1 dd58a695a10679f42fb76ed5ea6bc04c0d588617
- SHA512 d8172071f2591f83bd1b2192422dd54605fe68f354939740d7b22ee78770aa6b86e0fede40d6f58f8d809de7c92ebd6dd95c8bea66a9f0d182b6bee6ae6b9d19
- SSDEEP 6:KWNIrH9FZdrlOERX4PBX4ogLugMBX4suuK+/il8E0u3qU/+Ow2:KmgdzdTRmBEyPbP/imE0u3uOw2
- TLSH T178722B47E7C219A2C108473B50CBE3466EA05E2C4332C74B335207D43C01FDCAE91E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 f853458e24efde5a9e37f4d5fa28136f26632198e75f2e92ffa3b73ad094a9f9
- MD5 d90061f5e7cad0f737b9d0fb08b800cd
- SHA1 9cc398236ae9ea354c1958e24bf62c85f44abee0
- SHA512 1c738ef4d00a213534a9381d0128514b34e425511be978a97e1da63505a7fa60074b241fcb50e8ab2e94ae9939646ac9f230a4a11bd19fd659658ea9734d3aab
- SSDEEP 96:99qpQ14WSDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:9eTndjnHt9S/f8JzSV+6D86T0ED
- TLSH T107B3034E0FDE3500C0A964B595D01FA1B93E492DD3A3E3E1769201B5EDD2D21DE2ACF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.arena.Maharaja188/no_backup/androidx.work.workdb-wal
- Size 120KB
- SHA256 a26d4081f7f7dd40a3baa2f56496d28c6d4d64652053b47eb1678277d307ae27
- MD5 8e96297ff97f71e972b5d75a3b4ca4d6
- SHA1 e42ca1c03a293eb069daff476d1f82ab7a5121c0
- SHA512 926288194fccc123a47bc76091ebd7d40bbe0b3eb98f0cf50c3b97b7e2383df3e7e876b8f052a0e62821ee44c5b2c3090d3a1974a4aec8f51953ca6a68d8da3d
- SSDEEP 3:RECQk2wzXtRKVjWtyol/YpTtH0XllgoqKXtRKVjWn:im72Vgyot+tH0p2Vq
- TLSH T11CC39BF376D51412D810077EE85BA7845105DD0445EC9875BF164AB138107941A24024
- MD5 SHA1 SHA512 SSDEEP TLSH