Analysis
- max time kernel
32s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/06/2026, 12:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
hgapp.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
hgapp.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
hgapp.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target hgapp.apk
- Size 1.6MB
- Sample260602-pea5psdz2p
- SHA256 d80a21019460b63580ce99e329cd3380ad5d61a9c5f37ca3d4beda02b2796c13
- MD5 f89dd7f5ae7945a9fd254e3a9ab10d76
- SHA1 5cf5c1e7d2bb67c03a5f07e73aebbfd6d89eb43d
- SHA512 08cd1ae8c8a72bab9fe360297b6065692cd1fe1f294b7ccff54df73c81e000515054e4b0de53df47f9ed70ffae4862ab1006e7ed8234522c2789c16ffe3e887b
- SSDEEP 49152:n+hSSSgx+gpgEu0cX407R7EtqYrrz5Z0iGHw1:n+hSdU+gW8cohtqYj5Z0i51
- TLSH T157750143EB08F57BC5E7C6379776065646024D284A83E7931E45B62C0DBBEC48B9AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener n7yp.nqvh - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone n7yp.nqvh - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver n7yp.nqvh - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo n7yp.nqvh - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo n7yp.nqvh
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Android/data/n7yp.nqvh/files/tbslog/tbslog.txt
- Size 15KB
- SHA256 83c57e1db19bb1df6e631b261c87a8ec9cd7200a8cd7ac4f44f3b9b3f8c1c6b0
- MD5 d3eceac407586f7811ff099eda04393a
- SHA1 e7ef996d0a2cc97ff373b8c0918b38d7600b4b20
- SHA512 0463d3403d63b5e5c449a28f2de6eb24b69b0651cc06166ac2f47f38a14b7e3827d882dd39dc2218ece635292c16b3500a4a5b3ad9df9f08f688dbf6f647bcb9
- SSDEEP 384:bsMspqEcfwFlpibbzhZekslmwFlOeoJWsV:rCVEIlpi3za/UIlhQWsV
- TLSH T121628D06136DD9526CDD8BFA07EEDF89F671FA2AC73156A1395030842D8292378690BC
- MD5 SHA1 SHA512 SSDEEP TLSH