Analysis
- user interaction
yes - max time kernel
17s - max time network
33s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-ja - resource tags
- submitted
23/06/2026, 00:07
Errors
Reason
exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"I0623 00:12:14.814360 927641 opengles.cpp:285] android_startOpenglesRenderer: gpu info\\nI0623 00:12:14.814386 927641 opengles.cpp:286] \\nWARNING: could not open libX11.so, try libX11.so.6\\nWARNING: cannnot unmap ptr 0x747b828b0000 as it is in the protected range from 0x747b828b0000 to 0x747c02ab0000\\nWARNING: cannnot unmap ptr 0x747c02a01000 as it is in the protected range from 0x747b828b0000 to 0x747c02ab0000\\n\",\"error\":\"signal: segmentation fault\",\"time\":\"2026-06-23T00:12:48Z\",\"message\":\"Emulator process unexpectedly exited\"}"
General
- Target eB6sPYNUBi.apk
- Size 11.0MB
- Sample260623-aeqstshw21
- SHA256 b8af9b6235b795ea526ae9465fe8e0a81d15b6ca638b16f2c86f718169f96c1a
Score
7/10
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
- Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.kjm.kamp.sckg.xp0ko8wj1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
payload.vdex
payload.dex
b.apk
base.4640.tmp
Google_Play.png
b.apk
baseline.prof
baseline.profm
installing.html
profileInstalled