Analysis
- max time kernel
148s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/06/2026, 12:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
5unsur2_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5unsur2_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
5unsur2_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 5unsur2_0.0.1.apk
- Size 5.5MB
- Sample260627-pegx9aav3w
- SHA256 81f86d8a14fe1932d08af11ec09567b0ecce0d2c122bce8aa00a815bb3e2d096
- MD5 3f73edbf61cffb01c82ee7b8f38af5ff
- SHA1 cf0dc3390f7999c65675b8b2300b57fa5c663500
- SHA512 c02006b3d028d4419ed8316bcc77e9f7ae18efeb6f4ac6d5babfe102b2fe2663833d0cedbb90150a9544aee16ea3fb31fc8daf221397b36db18ddaadc981df95
- SSDEEP 98304:9CH3rZd4tQK/09DUCRApppqbOCRWnyeKv0hEc9N4BdE4trYoTYrFU:9Am/Yk9nyeciN4LE4v
- TLSH T1174601CBFBD8592FC87700B2C9AE52B126478D068A839F43AD44361C79776D41F99BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agent5unsur2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agent5unsur2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agent5unsur2 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agent5unsur2
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agent5unsur2/files/profileInstalled
- Size 24B
- SHA256 2bed6c7bce87afb3fdc1b11712d8629be2146f019416589eb0f29d997bbe7073
- MD5 0a184cb820211bcebc03e17911fc53db
- SHA1 758ad9a7005e7f9d0da08ffc071842c366d32709
- SHA512 bfdcf05d22eb299ad70e0fcea989ffd6e9ef60c8d1d3f639328732d406d7ed4498296544dd966e10a67873c30bb063b2733284253a693842a07394cccd24035e
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agent5unsur2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b17cd637a1a66a23c2da43c0da69ce5d2fecb6397ad34e6930a745044ae6ed7c
- MD5 73d218705d080cdce2195489a6cc6bb3
- SHA1 048ece191fea36aa01e2d3acaa9549de522d9240
- SHA512 e65ef6ef058acbedc409ca9b4153aa080794f4af72d1736af8e3af920a4f32d662da984d3e08f84b620876e37b0cac284e3cf2e59b3944e74a65cc27d056caa2
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agent5unsur2/primary.prof
- Size 2KB
- SHA256 acbe14d436b16b18a670b56d18ed13b3baaddfdaa06f0592726185565af5e26a
- MD5 5e9c10782fc56a3f3d41d548e27d8a00
- SHA1 3ce19a79d6cb87d673b317c20ba1fa4e56b4e3a0
- SHA512 f6e02d10a6d1a13c51af9a666fa12458f8c8ee150e9b13de611783525042aa1dd8ceda1c8dd6fab0c5bea46d3ada6ac9c596027ccc3fe71728f4e78ec8e05e9d
- TLSH T1B051098B832D5131E2E002FCFAD752F444122BDCDD76F029B2A81817B60183325618EA
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agent5unsur2/primary.prof
- Size 7KB
- SHA256 01530bd23f03a14eee52278d6e0cf138d21b70ac2d4da76ca619148351ab17b8
- MD5 42ccce3b143556404293b25ecdc06041
- SHA1 3da9d05e8a8cb7c42296ff7a5e52f98265dcf6cc
- SHA512 31d09830b99c1bbc7f0d73bf228f42c644e93a7c9b1ef8ffa41877c02cbce02c6e07592848a93921e69c5cc1648e09afc4f8e24229e06ff015d4e6ac5df23596
- SSDEEP 192:udZH8Gn3A7Y76k6iuhDr9+LFp3g/3ACdcMeo:uf7QYp6iuJsLFgwCOxo
- TLSH T12AF1AF686AAC81B20B51EDFC1E44CC77B3E8B95060F44DC673F947594958FF664A1C34
- MD5 SHA1 SHA512 SSDEEP TLSH