Analysis
- user interaction
yes - max time kernel
123s - max time network
93s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/06/2026, 17:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Prescript Device V3.2.4.apk
Resource
android-x86-arm-20260325-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
Prescript Device V3.2.4.apk
Resource
android-x64-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
Prescript Device V3.2.4.apk
Resource
android-x64-arm64-20260325-en
4 signatures
900 seconds
General
- Target Prescript Device V3.2.4.apk
- Size 16.2MB
- Sample260623-vypp4aex71
- SHA256 50236f717c3a772e346ea9bb090920e11cdc38df3a2dbf21c16449e83d4b3ee0
- MD5 f451e4b694c4dd8f168683c3c979a9f0
- SHA1 fcecc14be9c13ff4b480b9c74fb095058a52abe9
- SHA512 888cd267a60fb4e1bca82ad9d400749b8dae5aa9c057b02a99de3174e088a5358cb350cff5893129c8894ee9c5cd7526f18c229d9baec7ffd54aaad2289220eb
- SSDEEP 393216:c7c4+9wiCs49SoCwo9uA8ff44g8YUDIc/tboDbn:AcmSTLOf4T+DIclMDD
- TLSH T1F80722C4D5921490CCA74C306E7BADB34A37BF15FF9DC522395AB189AA334D11A32AD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.index.messenger - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.index.messenger - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.index.messenger - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.index.messenger - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.index.messenger
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.index.messenger/files/profileInstalled
- Size 24B
- SHA256 66354172fed0012454670bcd3a05f247f9dcd35a9041cfca2d7840130db0bdff
- MD5 58efbb32324798307146b84a3e1202ef
- SHA1 b29a472e4c4fbee0734d1533f012ef25de105adb
- SHA512 4ba5aaea120b1c713a35b986e51da78a4521611ff33d37d24ec18f91b4562c6d353209a9b61f51fada1a55ee491c3753f28d79449f902dd5e1b24946a51664c2
- MD5 SHA1 SHA512