Analysis
- max time kernel
46s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/06/2026, 12:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
hccast.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
hccast.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
hccast.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target hccast.apk
- Size 7.3MB
- Sample260601-phvzaabv6v
- SHA256 cd3839da2da61983614b2843fd279e5edd6c7e348cd15a31e4e555aebef0fa4f
- MD5 771db36737586955bbfd862634bbad32
- SHA1 6dd87be5fa3bc41aa08ba83651c2661ac07034a3
- SHA512 535c235c7d13989f289d5edd048f540f1552f781486b2f87b2d7b81f75e7d44d1fa2a7c64ec7a9a04081c72b172ec28f9892daa4d383229870cb016af1324e32
- SSDEEP 196608:uC5VI8eT6Pmdbc52qJD7HoL4pG11xhhRjg9:n5WFT6+dbcYqtbocpG11xhbU
- TLSH T108761282FF5CA92FC83710334BA6123636568E168E43D757A868730C69B79D81F49FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.hccast.application - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.hccast.application - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.hccast.application - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.hccast.application - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.hccast.application - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.hccast.application
Processes
-
com.hccast.application1⤵
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5021