Analysis
- max time kernel
145s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/07/2026, 00:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
99d.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
99d.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
99d.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target 99d.apk
- Size 366KB
- Sample260702-am7fjsas81
- SHA256 00f5ce7a28c5970c9adfd975359fc8dfe90c66e57ffea9480e389069cde00800
- MD5 e8004d4853dc991ba8f5dcbe0bb4c50b
- SHA1 9b7eb223000c118f654d892e3c69f96440655f6f
- SHA512 d764a2cdf9d1d364d32370926861e76b66255f0c41de8cf8e06a5652f2bab56c7f90049f2516492ef9023fbd7d7cc5dd5b3581e8e7cf1607df5c955e29da04d0
- SSDEEP 6144:WFujUxyX/p1flXlFujUxyX/p1flXgFujUxyX/p1flXwFujUxyX/p1flX1FujUxyw:WcAxyBFtlcAxyBFtgcAxyBFtwcAxyBFr
- TLSH T104840293BBBA4586F8E34734DA29DC651FE3E1BC17712299423537224A20AC95F4DBCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.k99d.k99d - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.k99d.k99d - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.k99d.k99d - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.k99d.k99d - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.k99d.k99d