Analysis
- max time kernel
106s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
29/06/2026, 18:27
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
voice-todo.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
voice-todo.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
voice-todo.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target voice-todo.apk
- Size 3.7MB
- Sample260629-w3p24act4x
- SHA256 713dc354e83c3806b5559b070e6e4bfcede198a6c502b9417b997ef9a9bfcccd
- MD5 ca38afa8cef2681271f2d6f9587bd379
- SHA1 78628ed689c1914d202fb89d2f5e3bbebb134525
- SHA512 de33da281f2f69d8684c0acdcfb6bcdf1cc97fde21cab87eb5f043b2fb37a6ec307b45a32b668767465b82ef1e0cee9ef35a461bc0cb72f3f19127c802901c1d
- SSDEEP 98304:xHgK1rNTPBEyhfkvB4/IcG+Sp4q5VzcE1WhAiCl:B3d/jfEj+80EWq
- TLSH T145061242E3E59D2FCC7382325BEB577A16815E42C692D3138A24B21C6DBBAC44F95FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ric2002.voicetodo - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ric2002.voicetodo - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ric2002.voicetodo - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ric2002.voicetodo - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ric2002.voicetodo
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ric2002.voicetodo/files/profileInstalled
- Size 24B
- SHA256 919c66e68b13eb04a5fcbb13e8595a700c9026d00fe50004b352d320b0add486
- MD5 79455f7d74e7db0627f66fb36ae9af5f
- SHA1 503ee9fc8fe155514f0460961942cab72a085086
- SHA512 21bdd49d280184b9e702f1ea3154cb698accb9267f7d049ae46f0fde08f5577cc8abf7d4df31a04b1a1547dbfde43ec788bac1d74de658c3713d6bcc9c7032b5
- MD5 SHA1 SHA512