Analysis
- max time kernel
47s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/07/2026, 00:21
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
AlfredPaySecure.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
AlfredPaySecure.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
AlfredPaySecure.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target AlfredPaySecure.apk
- Size 15.9MB
- Sample260702-anm4asat2x
- SHA256 bbc0f744641490096905afc9af99b1745e26636fd8ead57b1a02b21a144cdb34
- MD5 80e7bcaf708af6a8e075701443c21e25
- SHA1 1bad473f2638fd4ed393ea930714f950ff2f9672
- SHA512 607830f4924c1a6f746f1094272acac58d0fd73e46c92e602f59877450faf70eb08645ab0da22b77fd0dacb2265e967d7d252d4cf945a92524c5d1b1d82959d0
- SSDEEP 393216:h83OrlfSGTcdiZ/b1uOpoMYsywMXWgC73wtZk7:y+rlp7ZcOKMYlk73n7
- TLSH T1F9F63353F784546EE8F3C73207794A1550068CA2C763E387B99076BC29B36D086DBBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener fvfq.bafrko.tgpjyli - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone fvfq.bafrko.tgpjyli - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver fvfq.bafrko.tgpjyli - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo fvfq.bafrko.tgpjyli - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo fvfq.bafrko.tgpjyli