Analysis
- max time kernel
148s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
29/06/2026, 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Slot4D.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Slot4D.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Slot4D.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Slot4D.apk
- Size 2.6MB
- Sample260629-pc89qaew4l
- SHA256 c408a74508f024e69c64797f98b9e8c944a4c0cd951a121298753a5348011790
- MD5 e62b377851e5e3ff31fdab7817a0e681
- SHA1 ed4580f68118288d70252cc8e916a54fb7579248
- SHA512 efe77fe2b1617a7b7506b09a20acb0449f89e0e575b525f0362500e2a200daccf51151574bd8dea353bcad0598a8b5a07483698f79b4a706b4caa89c4dbe97d8
- SSDEEP 49152:r2tMxqTerYggwDOb6r+gX1Kskv225qICld8jCxg8YqAlPgPNRb:SUjWWrtQJtKdri87AaRb
- TLSH T1D9C50182EF25D82EC8BB44370DAA033117569E2EC596934385EC362C6C77AD80FD9BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.p4d_slot4d.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.p4d_slot4d.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.p4d_slot4d.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.p4d_slot4d.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.p4d_slot4d.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.p4d_slot4d.app
Processes
-
com.p4d_slot4d.app1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5120
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.p4d_slot4d.app/files/profileInstalled
- Size 24B
- SHA256 604d19b95bf5cb403c1356f47c35e1ec72b97f591f08d86522ea33114f439185
- MD5 c2a2f5489ad4710d58b81e1544f966a4
- SHA1 cb1c21877b4d9e3170dc2ddb12bc91fd0c8dab20
- SHA512 b721ea6e2396fc3f1f1bfe1e1acd5ccdf2588a9d2c98c01dbd782a41b3ad2ee74b9949f3561942b5dbfe3c1a99e7bbb58bb8cc28d8ae855e96852a6a607f3722
- MD5 SHA1 SHA512
- Path /data/data/com.p4d_slot4d.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4deef38575c4f99e38e1c34441657cea524409b0342e6d93ed3aeee52c0ce95e
- MD5 19692443283856c1f1018cc0d0a4a8e3
- SHA1 ad5be6f278d60d5092a74179d8a9803634a49158
- SHA512 bc1b3a8f72824dae2525afc28c21ec7395308d136f011b988ad84f6e093fcd229d2b4bd67c7012033eb44dd55c1e2921e22c94b422654142d4b2c12da7c03645
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.p4d_slot4d.app/primary.prof
- Size 2KB
- SHA256 fc5caa8f6c8fabeed3c6e3fc4778b455ef3d870759b9124bd4ca154c0d10747e
- MD5 87d5efe10de7ef44d33bf756106462d7
- SHA1 6a54138fdb049e810966dae3ae905c4374d911c1
- SHA512 fe2a8625a8fed3ff776ca00c3e5004d10adbeced10da4370f90160423bda08c20743fdaedc19859c843792f3a45946cae6caf0ab543e954d40e66aab379349ba
- TLSH T196414B81BD42695B678EF0089604C3FC2242140EEDEF221E2CE4C7E470CBF5264B7863
- MD5 SHA1 SHA512 TLSH