Analysis
- max time kernel
146s - max time network
158s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/07/2026, 06:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
maycash-1.0.4.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
maycash-1.0.4.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
maycash-1.0.4.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target maycash-1.0.4.apk
- Size 7.8MB
- Sample260701-g3tmyshy21
- SHA256 59e4a019d3449f5889fd28db26ff2f998a7af81092b26a9bd95b2ad1c55ef8ca
- MD5 d1d35d1b4d0cfb8a5c6f3b83c12d39b5
- SHA1 98e4eadb2a86d991d6b0131a0b69ff08a86e8f41
- SHA512 d065f42ecba5314387a4fb258c5d0b71331ade8629d1b4e2a257d7bd253483675b7e5e480a1cb8ae844649fb746be5fcf8c7045784bbb0936dbf9a21219652bf
- SSDEEP 196608:xQ5nI2qWu7DKRo/7usBbchlgg8QrgIQgi9Iyadm:y5wWRo/nBwzJQgiyyv
- TLSH T1A386029EF71A992FC87710728CA5523312574C12A68357B37978331C78BB6E88F49BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener co.median.android.mbdoedq - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.mbdoedq - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.mbdoedq - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.mbdoedq - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.mbdoedq
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.mbdoedq/files/INSTALLATION
- Size 36B
- SHA256 eb734f9455951143c8e437880f14c796924e42f99afb6e77c2e2a1bc01173066
- MD5 2da7f7a11c0a90835e8ed708f0077870
- SHA1 7b7d2dca20cf8d93fe0cee916baa10cf0eabf15e
- SHA512 862e5a3fd9953181f8cdd2cc565d6990a3e65ac708da17c3bfad351f30f52db85ad18497dc2a711bccb8be148200c04a2f0387656503f5cebdba5fdadc740835
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.mbdoedq/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 3aa41c17f0f6e74689a69377a9069f851b2d3ba2a4dd9558457909d8703f72de
- MD5 c1672f822c972e1bdab333ab4a143221
- SHA1 6e311ee5b4a71ba396f27831569d072cc054d652
- SHA512 2a13aa4499bf75f784b299700d9a9345e4b2d8d7bbb1554c63c77295d82e2888ba055309b743dd875c1bc9075e91fd132cb31bbb72786c8dec7a5875e6467f2b
- TLSH T188410274C9280DB398C82864B26E421B7A72215F2FD6391DFB8C062C1F4C5BF69B820C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.mbdoedq/files/profileInstalled
- Size 24B
- SHA256 7f73f7a8bc43fdf360510ea87218ab133135454cc4eba84b421526ffde858b71
- MD5 b24a1b0ae4eea45478d42d554332a200
- SHA1 4d4722659835cbdd15c4d89d9ba2d60cac66b6b8
- SHA512 de89f1a829deb95a5f28e3087403b2f19c19c775b2d62694e7d05087f5504b6ec4bb15bb5fb49094bf828713f70119483ca2e930212d24ae054d8016be08d83f
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.mbdoedq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0f057b6b7d5d9b9dd62cbe19f1659b61765528e3b09036432bdf3a2f8b61d880
- MD5 3c0eb522e93287086443893cbd7029fd
- SHA1 4c507942016144eac5689b467e3af28d92dc9cea
- SHA512 df9c0dd32df24be82ce08c069164f4d14e568ccbe29e7d78306cf9762b23208190272f7caad4a7f9043a7f07f0177664a1778b80a7218eb403c0146e2ca593cd
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.mbdoedq/primary.prof
- Size 1KB
- SHA256 99bf39902a2a76ac90518493480a37072ca6d9a464fce9078b84cbfd268cce41
- MD5 125a99410890d798992d13425d407bf8
- SHA1 2a2d92c2aa4da7aeeb9e380da3692930923a2799
- SHA512 efa83c5e529cb7b1417a9e9e4f77e53b81748565ed9c7bd1807eda7b19a1654167d6abea7da5a5c619028fb60565ba47e9a0faac36659f079bdc4cb6b4397624
- TLSH T12E4119978409518F92D03F73E5E850A64A8AA43748ECD868713F89FAD4CE908791DB00
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/co.median.android.mbdoedq/primary.prof
- Size 4KB
- SHA256 255cdcaf9fd84aae44f648f1b09de9eddb7c0b4c32d4de55344fad4f02c46ec2
- MD5 438f76ab5f2766adc070461f47146db3
- SHA1 81d5626e883f477fdef6c1725295e53c14d2a5b2
- SHA512 97db0b82e778db63218d07be006352cfa138c390ff2b55b50b8fcf3900be139c62fb0ee05bfd91073c7da221aa5caee2288a509f9c12c7aca31f5cec3c59e56d
- SSDEEP 96:bfPd66QMp1cRXRG7GE0Fe29NAvSjDVL+5W37C:bfPdz7p1oAaEqcvSn58W3G
- TLSH T1FB918DE34266C534BA0C031DB5A55A97A48D73E5ACE0E773C22C833BE4330748F9A955
- MD5 SHA1 SHA512 SSDEEP TLSH