Analysis
- max time kernel
87s - max time network
155s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/06/2026, 00:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hongkongpoolsgold.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
hongkongpoolsgold.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
hongkongpoolsgold.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target hongkongpoolsgold.apk
- Size 6.0MB
- Sample260628-amlh3sev4m
- SHA256 e5d6b48b7bb4f7038da94dfbda0f591ab63091ff8bf748ac09f3df1e54de881a
- MD5 fdbc7788bc75f77a8508dde44d38bd32
- SHA1 0098360e3d6879585e9de52f280b2f9d1dd7bc6c
- SHA512 01c7af761a0bdb6589ef0990a67a1fc0a54397cb2193ef3588db2101a159e3c45e07ea8fb37225c7540a3f7adfa4bbc5dd6f625b45ce236dd7df95865fa0aac0
- SSDEEP 98304:boTYr6nUYwRCSkeS9Y5PlvSnJIlFZv1MSXNNwd2OpiwEvD31pVQ55JIf/rF0CFyF:y7wsSb5NKMXMSPwvoDppVa52HhZFnU
- TLSH T1C05601C7F788A92FC47710B289BE567111474D128A839F836D58360C69BB6D82F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wms.hongkongpoolsgold - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.wms.hongkongpoolsgold - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wms.hongkongpoolsgold - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wms.hongkongpoolsgold - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.wms.hongkongpoolsgold - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.wms.hongkongpoolsgold
Processes
-
com.wms.hongkongpoolsgold1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5080
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wms.hongkongpoolsgold/files/profileInstalled
- Size 24B
- SHA256 fdd08dc226878de6be5105be8fb757b751e116a7bf361f2e632144e4b70d542d
- MD5 e1c7f3cdef4f2e076bec539fc6b31886
- SHA1 9b8455620008fbf1cba76687b7a48a6a5abba425
- SHA512 6604fd142a00e4677447352b7d7889dc4ff79c8682589139c1b48d7ed596908e0e626b36d2e57e60f3255a206d50dd0fba92abff3724db9e12a44b3d8d7a19f3
- MD5 SHA1 SHA512