Analysis
- max time kernel
54s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
25/06/2026, 18:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
truyen-convert.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
truyen-convert.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
truyen-convert.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target truyen-convert.apk
- Size 3.9MB
- Sample260625-wwe9baev6p
- SHA256 2f17199cc6e543cbe320ff11a7936a36a0fceaa740164487dc325d62cb73abcb
- MD5 97d9b1ac88fa28faf8ac9d8fe589b954
- SHA1 c960d823c1fece76241c5505056e8f344f6f4985
- SHA512 f8b1676154ca0f7db3cf07ed70bd006075a512f1b3c310f2ee3d72e83dbee0561ca694424251e1ef0b9f8dd837c306388676a4544fcc64a08c6ba710b86aa6b0
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCq3hmmWw:eZjJk75T15b6tUk6z8RdCq8m
- TLSH T17A161242E3E56C2FCC7782365FFB972916818E12CA96D3038A68721C1DBBAC44F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener app.zakiel.truyenconvert - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone app.zakiel.truyenconvert - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.zakiel.truyenconvert - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo app.zakiel.truyenconvert - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo app.zakiel.truyenconvert
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.zakiel.truyenconvert/files/profileInstalled
- Size 24B
- SHA256 68ec3a440c8634be1e80710eed78c0df3d9f0787da9c30499687ce9c7998bb7b
- MD5 c69199b6816b8e3f3f31e5955e9c8763
- SHA1 e90022e3bfcbee26b0e716b13ef558c545ef155b
- SHA512 ef4666cb99c669fccd941cbb3fa9eba327d2ec804a1fedce04f26fd61a09a0bea9bdbc5224fbd927465df6f69c05f9d33ad7a14351729d31d7dee5064b9fb7f5
- MD5 SHA1 SHA512