Analysis
- max time kernel
47s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/07/2026, 00:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sn580.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
sn580.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
sn580.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target sn580.apk
- Size 369KB
- Sample260701-ap2cbacz5w
- SHA256 9200285c28c8925c13c9d2ba91677f7894eada4be2555a9f7081af3f421b2335
- MD5 65e8567a62f70ba538b026a87fd164f1
- SHA1 e94acd8cd19bc1ab9f7809ebf12c04bcbdf6cd60
- SHA512 08697db50408aef79cf1cd75026bdd970c079d4673d208ed6b49d53e8cf977124eda91e1a418b5ca3d71ac916f8eb6e2a47ecfd2da2944e72c724202f8387254
- SSDEEP 3072:IRZeXLlGEeZBsBi1S7zzvZWRZeXLlGEeZBsBi1S7zzvZzRZeXLlGEeZBsBi1S7za:QmGtswmGtsZmGtsJmGtskmGts/
- TLSH T12A84021A9FB06500DB632371F702E54CA59DA9444E50BBFA8F6DF888381A9589FDCF1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.sn580.sn580 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sn580.sn580 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sn580.sn580 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.sn580.sn580 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.sn580.sn580