Analysis
- max time kernel
11s - max time network
13s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
12/06/2026, 12:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d91e2bf391a69b0f5db7e99df8996dd7b8e3d5ffd2c80cac08f05a62f18acf8d.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target d91e2bf391a69b0f5db7e99df8996dd7b8e3d5ffd2c80cac08f05a62f18acf8d.apk
- Size 2.0MB
- Sample260612-ps5apscy7w
- SHA256 d91e2bf391a69b0f5db7e99df8996dd7b8e3d5ffd2c80cac08f05a62f18acf8d
- MD5 ef87e6e093e8340f0f58e82e398adc74
- SHA1 fc2c0f30dabb58d43ecfa1e2dfe1f7fc4406b68c
- SHA512 caa72ea0531e649691bf2097a0d990f7302992b0252fcf5f8931cb998478540880ec133d74cd91ef3dccd6ffd915324ad8057103c57df13bb08e53ba65552bd3
- SSDEEP 49152:CWfIsw/9gaS9zGKeLMiJZZ2MLZP6YNbxjcRk7K9e4W6pU:CWfIsa9Q5zeLM6pP6qK9ed6pU
- TLSH T153A5D056F708B827D8B7E83282B2872903954C550B56A71325C5F23C49FBBE49F8AFC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.klzukykr.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.klzukykr.app - Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN com.klzukykr.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.klzukykr.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.klzukykr.app