Analysis
- max time kernel
2s - max time network
39s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
04/06/2026, 02:23
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
MarioOPT-1.6.1.apk
Resource
android-34-x64-arm64-20260325.1-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MarioOPT-1.6.1.apk
Resource
android-35-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target MarioOPT-1.6.1.apk
- Size 352.6MB
- Sample260604-cvfc5sh12q
- SHA256 b0f6182a76298e2dc0eb20e5e367497f730e052cc5eace3d54d47282ddcf710d
- MD5 37d183685d52e6765c016aced7f60031
- SHA1 c63239f1ce7ca4d64b2b3dfd57fcdf77f31917d1
- SHA512 3dbb66c579446f7eea62c8310901c704f2c992a599fa9a33f1460297145f033503e6037657d038c7245e9411e4aaa901e089d6ba9dc34b0f8683ad1b789c69ff
- SSDEEP 6291456:Qas0u4qwYydnr/eli4i27D3hDuxz1fBsy7ZkKFDnLp/bcSdT8ey7HUmUY7gdUSSh:QastdydnjeAO3w2y7ZlFDhBu0rY8LSKQ
- TLSH T13E093381A3B5D485F922257F59564BC0B3B4F9A4DF03C3DB3384622E6DF6A814E06BD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.optimizado.mariolocuras - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.optimizado.mariolocuras