Analysis
- max time kernel
47s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/07/2026, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v18.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
v18.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
v18.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target v18.apk
- Size 408KB
- Sample260702-anaszagw8n
- SHA256 4a476e637d73eaa2a5b38803d334c11e6fe1a88ffda894201d9e03623153183f
- MD5 af9aad6e36b7ec9710251cdd6a80a3a0
- SHA1 4e52993e4064a98617ea58dc71cb83192127a70a
- SHA512 f4753fa244408ee49a9df9c0fddb216208ddd0bf1d48075ad766b0bcaca4fdd7f382656dfb44498d14ef2d998d4136715735f872cc4c9e2c2fbdc85b09005c85
- SSDEEP 6144:8ZrYiE5iCfgWAZrYiE5iCfgWtZrYiE5iCfgWpZrYiE5iCfgW8ZrYiE5iCfgWD:8jCfrAjCfrtjCfrpjCfr8jCfrD
- TLSH T14B94123571EB7467D4AC2670B5D5AEFC4D19F417662D0BB2423AC2AC7C8E090AD2368F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.v18.v18 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.v18.v18 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.v18.v18 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.v18.v18 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.v18.v18