Analysis
- max time kernel
26s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/06/2026, 00:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
44000.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
44000.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
44000.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target 44000.apk
- Size 386KB
- Sample260628-alnxtaev2j
- SHA256 e5223d6d4720af8db1023d4deecd54c5de0314a439b37bb5781887a1689c0119
- MD5 cfb50e181b8d4509e7cb7672db5604b7
- SHA1 2121252bf11d3acf187e1df3224efc9079718809
- SHA512 3fe6e1e7cdd5f788bc0520390b4704148649976736e925aaec7be965c5f08567e53a01ffe23a51ab9cd5cf919ed0d5d11eebd4bca108b3e1fe10f3f57ec466c8
- SSDEEP 12288:P88eR+7ka88eR+7k588eR+7k988eR+7k+88eR+7kI:PZmsZmLZm7Zm8Zm2
- TLSH T195840259E33AE272F8C50EF1893FEA49945E5D6FC6622691CD4AC5B8C520380CFE7358
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.k44000.k44000 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.k44000.k44000 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.k44000.k44000 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.k44000.k44000 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.k44000.k44000