Analysis
- max time kernel
142s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
03/06/2026, 00:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
AlwanMartRider.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
AlwanMartRider.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
AlwanMartRider.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target AlwanMartRider.apk
- Size 20KB
- Sample260603-aksjlsft6x
- SHA256 1f6f03df41cd5968f9233c9aff0885a179d816da4e68be4890fcc0e106d1fe1a
- MD5 e560315b32e5650b9ea25a658e7f87b2
- SHA1 8cd2766445b2a3f4cb4c81d5da4c35b7c659c4e0
- SHA512 170a084bedf840cb7d0a62d2628f61c2f6eacd60f1574cfd36817efe4388dac7c33ebf9fa8643822e387360f7750d3b97be41301a93b9083deba533f990b8dd9
- SSDEEP 384:KJ/LkEa3phQOozkY9q8yfFqEBPWRuuaDXkld29w9zF:mzkh3p8A0yfkyWAuaDXkDF
- TLSH T1F0A290B7C3BF8815FADA99B119F955435EB0C6BC62AA260FA40465D0BC4F7916F8108C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener pk.alawanmart.rider - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone pk.alawanmart.rider - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver pk.alawanmart.rider - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo pk.alawanmart.rider - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo pk.alawanmart.rider