Analysis
- max time kernel
21s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
15/06/2026, 10:10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Intesa Carte(1).apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Intesa Carte(1).apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Intesa Carte(1).apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Intesa Carte(1).apk
- Size 2.8MB
- Sample260615-l7vs2aav3y
- SHA256 d29295f1504676003fd3ccbd3e41a53aabbe80d2025bfb3a6ef9a9fcff97b6cd
- MD5 156ac1f4f722b7a7135817b07b6367ac
- SHA1 b070e914c67242bade6e30d57ad8a65dca9db5b9
- SHA512 7e8f878351731b184e28771e88a46199572b9f9e30fb098dd50703e6df097a8e3f9016697d83f3f12a4044d1e88eee6367807a73f73b23af94731515af1b2b73
- SSDEEP 49152:rzzoxl50bzoNGDx0S+n3LqhVU5vwyMMuCqekHyYIyYe6CTGhgpz2y3K242:PsCYNGDx033b1MBek7aeZT72y3K242
- TLSH T164D5BE47FB48856AC4F7523308B9563115074CA68F83D6C7B954B23C28B7AE44F9ABEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.modol.nap - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.modol.nap - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.modol.nap - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.modol.nap - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.modol.nap
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.modol.nap/files/profileInstalled
- Size 24B
- SHA256 775be4caea8e30c4fe2566b955437f463ceef60a324f3872a90f1b8b88f352b8
- MD5 837a99d70fffa228ba5219c0938b6b25
- SHA1 f6608498ddb377b4fd4af87d79087be6a68b955f
- SHA512 c708315c2790a2b85f48d7ae10ed8b5dbc5aec2226de24f78c7953550b7683e6d5401a8a08a0fccbecfdce5b02bacd8b07a0b30ec3b4321e481f05d847fb0f78
- MD5 SHA1 SHA512
- Path /data/data/com.modol.nap/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d9627a9ee4c7758cf00fe21c2b813ae5b6a20e633515aea35b14c3add6eedc39
- MD5 5846e63be45a80f6a3b8bd85f03f5e9a
- SHA1 9dfe118f0a69f01938346a3ffd2e523711a2b9f0
- SHA512 33d887c9d3a2698c07074f3bcf34d570b19e1df004a62f5e91bfc27d8a3740ac14ba47570697e034778a6956542e9f69ef5cde4b1f7dfc91ab7e74f172e683cb
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.modol.nap/primary.prof
- Size 1KB
- SHA256 7104cfb2b066e69d3a8a20ece45192deaf89564dd619e5b9a189b3b588ce6ed7
- MD5 758515cfc630c81160b79a0c7f0af044
- SHA1 f8cc4c72264cb95ce635d3d7edb82399d15a6d6f
- SHA512 fc137cc960cd3ab1c6b9d242c019763576ad563397c59a740ed6aba6dcd9385ff2702f00856c43d9cb1c3ce0051d07a389502ba3a6b577e755ccd3efaefc70f0
- TLSH T1C421CA8B3C87D2D1B54A80BB7A1B4376768CA562116F310D6A995753C7C32D4F06438F
- MD5 SHA1 SHA512 TLSH