Analysis
- max time kernel
62s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
26/06/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ossiqntv.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ossiqntv.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ossiqntv.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ossiqntv.apk
- Size 964KB
- Sample260626-pgp2msbs2v
- SHA256 d374295a0ad2d763f520d24c733ae6f87ed2a19105bdf7725348ffeed9bbd863
- MD5 74a24fd64ee9c9508a9b13c359181242
- SHA1 e20d9afbd3d151bbe6369823f2942517b6bc2ff1
- SHA512 d8b6cbd39cf8f35cc3c3a520b4f6ca6822dad4b324b6c6eb1a6a92ba1dff417d62b94b24ebf3589022dc2b49557b338e39f0c0ef1dbf25dd449884fa9b024ea9
- SSDEEP 24576:v7sQw3yuhcBFewxYmfL1p1gDPeCOVDPeMnTO1RrQxIgDCHDWF:v7sQw3y1NxYmfR7gDP6VDP1ABQagpF
- TLSH T17925DF92F3A59D2ECDB784350F5A833127126E42C997E70B6898372C6D3B2C94F59BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ossiqn.ossiqntv - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ossiqn.ossiqntv - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ossiqn.ossiqntv - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ossiqn.ossiqntv - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ossiqn.ossiqntv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ossiqn.ossiqntv
Processes
-
com.ossiqn.ossiqntv1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5086
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ossiqn.ossiqntv/files/profileInstalled
- Size 24B
- SHA256 8849040d0d05a7256b324a955ff23365032c50ea19a0613927ed41ae86ea94e7
- MD5 0b3c02b2a7c3cfc7499ea51bcf60b774
- SHA1 52a5ee1e6ed50cf58c70b074fb0f24cfd9fe0a0e
- SHA512 440fa31080e75055cf24d5f7629e1b3dee75572b27c4c325ac5a501595ba33772b25a68dbb20ed8fd66194f8f69e0e32afabf6a04f1ea1e4514f22b9e01dea18
- MD5 SHA1 SHA512
- Path /data/data/com.ossiqn.ossiqntv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 76876c44199348c7e98f980c79841a0d24b4e7c26331f02b3ad4becdc9b117ac
- MD5 0fd16ee80e8fdf8d3ac97e0ba28cc3fa
- SHA1 5b6fb65b7ac37865259de4c71e7a05de3f858e1c
- SHA512 086733bc054d07bd6e8f10be8d73652d02c542726c6ce8cd1af61611613647b1e1ee289544c7007e19090d6c952505e0580f4574586ceb03661b42fa4eb461ea
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.ossiqn.ossiqntv/primary.prof
- Size 1KB
- SHA256 5bed28b16d781e07103b1ac45378a05605b91b0f3cdcadb05f33ffc98f4ab485
- MD5 cf33ecd63d7522414427cb1b9d47cb92
- SHA1 a8201840a2b568059fe4695c1b94b97d2c505ee1
- SHA512 91ff8833872116c3059a17dd20daf58e2d669e58b779611ff4653f9f4276e65e4822328b91c0364e13c272de41ecb71dba784e82bc4cae529b16e9f458d0cead
- TLSH T1BD21F91BE0523ADA2EFD4DD033BBDE3ED932BC296800195789DE6487C4C095D0DD60D0
- MD5 SHA1 SHA512 TLSH