Analysis
- user interaction
yes - max time kernel
163s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
23/06/2026, 17:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Prescript Device V3.2.4.apk
Resource
android-x86-arm-20260325-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
Prescript Device V3.2.4.apk
Resource
android-x64-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
Prescript Device V3.2.4.apk
Resource
android-x64-arm64-20260325-en
4 signatures
900 seconds
General
- Target Prescript Device V3.2.4.apk
- Size 16.2MB
- Sample260623-vypp4aex71
- SHA256 50236f717c3a772e346ea9bb090920e11cdc38df3a2dbf21c16449e83d4b3ee0
- MD5 f451e4b694c4dd8f168683c3c979a9f0
- SHA1 fcecc14be9c13ff4b480b9c74fb095058a52abe9
- SHA512 888cd267a60fb4e1bca82ad9d400749b8dae5aa9c057b02a99de3174e088a5358cb350cff5893129c8894ee9c5cd7526f18c229d9baec7ffd54aaad2289220eb
- SSDEEP 393216:c7c4+9wiCs49SoCwo9uA8ff44g8YUDIc/tboDbn:AcmSTLOf4T+DIclMDD
- TLSH T1F80722C4D5921490CCA74C306E7BADB34A37BF15FF9DC522395AB189AA334D11A32AD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.index.messenger - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.index.messenger - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.index.messenger