Analysis
- max time kernel
46s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
29/05/2026, 12:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Vastorapp.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vastorapp.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vastorapp.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Vastorapp.apk
- Size 5.9MB
- Sample260529-pgewnsbv7v
- SHA256 43fcb5d765e9b83e0ae8c8ef0dabc140ea98543d28ed86f7c7d71f3170ca9b77
- MD5 c671e845cd17feebe2707160c6da62fe
- SHA1 d262dda27ae57bfb3601d89e0ea2d7e39bfa473a
- SHA512 2fa9789fd1caab8e1a1de29be73387167ea00d0fbf0cc0f28d4ef5f35aabd9551fb86bb40423806b4a2d21eda8fc692372e8f365abb313d7d00d8dbaf0a71be7
- SSDEEP 98304:j9r5KU7DCfAtaIF0robT7usDt0uchhBaZDgj4r41Tt0ryGfyp+:j9VKU7DKRo/7usBbchT8Dgj4bfv
- TLSH T1B856F19EF7199A2FC47710B28C76523312574C12A6435BB36968331C78BB6E88F49BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener co.median.android.odpjlrm - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.odpjlrm - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.odpjlrm - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.odpjlrm - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.odpjlrm
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.odpjlrm/files/INSTALLATION
- Size 36B
- SHA256 02b7ddc85640cb5f6df8668d08a01cc951ebea8c32a45169b30c69b307516fa6
- MD5 55be583d0c9eae34327c734bba335fb4
- SHA1 49b49c1c212eedf757dfae0828b0c38f1e68b126
- SHA512 cd3cb9177417fac1cbe855938976ef22b11eb8b741dbd13395daf9e19bb09cf797196c2c2b0c53f1c5157f8a7d681fc3494200d033155ed5eb0d497eefa053d5
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.odpjlrm/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 07a2eaf8c00a43b93041d9b86e163c2c4ebff4f046ca53df3e7d266d461826a0
- MD5 2ebd3c67011155925972a2bc9d081dfb
- SHA1 e18f943922eba5ce754c3fc2ef730bc73e034102
- SHA512 a9e07d230d02707dfb3f064a9f76908e25a92883bffc1c6273fcec2b7c3069895848438231d00357794f697604b3be6288b48741b286478d960e5e363d4f4a54
- TLSH T15A410274C9780DB398C82864B26E421B7A76615B2FD6391CFB8C062C1F4C5BE69B820C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.odpjlrm/files/profileInstalled
- Size 24B
- SHA256 0f79557cdc88aa9ba78537afbee86b2e5a972cedc8e7595b7b0be8d52b3ee165
- MD5 9f21bd5bae522e5ec930bf448f65a534
- SHA1 b6248f47e7fddcb7650aff87adca0bbf2ef0606e
- SHA512 c02eeca9d4ecefd1f94a753eab39087718ad30a1e2fb59b8d234507ba676e4e3025898a93da0627254697a617c06bc408dbde62ac2b5a03144a071111487798d
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.odpjlrm/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a4aad1a5d84d57594feba8082b54e3d5c2c564d3142a58e55be41b0dc0b41fdc
- MD5 08873545d75206c2249b26f240c2ea4d
- SHA1 02fe6cbd2d93b412ac12adfe3cea3cb22fb696d4
- SHA512 5d8977c639648a5dea7447be06bea07f326f5c0422f1658cc6c0e5faa41e22b85b036dde8c94a3fb63c152635e3308394bb86e4d5ea9e63b27ffcdb26e81c4f3
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.odpjlrm/primary.prof
- Size 1KB
- SHA256 a3fcabba4ad632e6501e9372f4f17ebe2f31abb236683a42c8cb65f465673ff1
- MD5 e59bdc56719ae03d7b270730f599767a
- SHA1 023ad1796207756d124f2766735a58e445a4fcba
- SHA512 e6cd464e8338e59ff4bc5aba60c457638069ad31b7725fa217c26f249dab5be5c49f2692ec18f735d4a1eeb87003aa3fb1bd8a9c716a9947d0dd5119234ae33a
- TLSH T15E31FB19986EBDC6D13210F7BDE15A1A7701D7943D819FDC2D26A6C121C86E5580B8F1
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/co.median.android.odpjlrm/primary.prof
- Size 4KB
- SHA256 7e2d28e9544f9b430e36c0b6e33d521a1cf841b88783e79d8198f94d2a5afc34
- MD5 5db263269156638308c0a3b7c8a04725
- SHA1 1c74e4d7908e9ad069c9848b32bc4e3390250f95
- SHA512 75764306dc844443ad3665b962bb92512be9a761ea5d11a4edf356504ee92b469660a4dcc50bebb1ce07cf00e43a7d43d79ec9f4349c3ae8480740d25a966ca7
- SSDEEP 96:hMkgFrZIsch+X9UTqTS8wGE46YHWIlbA/6nheQqdoU33W6nMW2:hMkg4kXWkjT6Y2IFw6cndb3W6n/2
- TLSH T13F915D5FF9052C7984D92889C4D5AA280F311881C5175BBE7F3C2DB1EECD0C93D5D1A9
- MD5 SHA1 SHA512 SSDEEP TLSH