Analysis
- max time kernel
26s - max time network
158s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/07/2026, 18:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target app.apk
- Size 8.3MB
- Sample260701-w15d1act2r
- SHA256 175cda3e1b491e871ffac28ffd2735b3826a9c9cec8f3b1c19dfdd0778ade919
- MD5 a41d6b2880aa9e75fbde612e317bf89c
- SHA1 57390bdddf26f923d23ec5ab8cdba8fd86a47c13
- SHA512 b65c11cd5bd37c8d620539168ada2cdca8bc1a9c130be02b29f3ed4dc4534897e0c0db65a00f1f94534bac35f27335c23272a7e4f99038d7a696509a509cb598
- SSDEEP 196608:MeI/Bo7CeZRlSAW21c0Yhdh4Oa4xxBsXgXjiNnhE2QP:MeI/5MRlSAW2YEOa4xxbiXrQP
- TLSH T1B496E0D3F6449915CC770A76497AAE3103376C2AEE4787073884BA0975B32D23F66BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.islamic.duaekumail - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.islamic.duaekumail - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.islamic.duaekumail - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.islamic.duaekumail - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.islamic.duaekumail
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.islamic.duaekumail/files/profileInstalled
- Size 24B
- SHA256 db9bc141bf7d7bb17da1f5d446bb8d6406ba29668c447e563fa048345ad4b848
- MD5 890474c3d8eef5b4045a038d8e49a720
- SHA1 3000b3df9f36b2af2abe28c02e9c5eb1565c5131
- SHA512 84762d823e85a23a708418b18dc4e3d56b6c705c3ea8a271b4c2f5cbb2b485c5f88ee87c69d14fedb45454c28e128ad3fe1e9f38519c51f949488189085442ad
- MD5 SHA1 SHA512
- Path /data/data/com.islamic.duaekumail/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4a4bb914ecb5862f9bd2222334c30897ba1a4fd37f91183cfe59adbbd9d2352a
- MD5 3dddf017e2fa787d1c84b06b10a9a480
- SHA1 95f70a684535b6b15d1867c3ed013f104fb42ebe
- SHA512 e54ed5d7279e7826a678e2a2d793c3733df448ecc032bb04cd94eb364ac33897cdf8d8538fe8db814878bacc0abdf2c87fecc8b402d510915e5f081d55382ee5
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.islamic.duaekumail/primary.prof
- Size 1KB
- SHA256 a98761137d9581347303df6e68eaec4b002d20fdff40de4405a67a4626a0e27d
- MD5 fc68481cbb99a046265c5573caaac8df
- SHA1 16ac4473a7da35e644e4c11b6b536e435e6ee534
- SHA512 60222d35a427ffaa5b08c43b05a3c20917a4312226a556636d6fd8ac5151af7f67701cc594720f9bf5d7bcc11ab41e987808553433cca2c913f5db6ec7252aa0
- TLSH T1BE310B362557462C9D5D30645E278BCB37D5D7A7E09D2311C33E00201696739D931E13
- MD5 SHA1 SHA512 TLSH