Analysis
- max time kernel
301s - max time network
897s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/07/2026, 01:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sisters_Compass_1778290199.apk
Resource
android-x86-arm-20260325-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
Sisters_Compass_1778290199.apk
Resource
android-x64-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
Sisters_Compass_1778290199.apk
Resource
android-x64-arm64-20260325-en
4 signatures
900 seconds
General
- Target Sisters_Compass_1778290199.apk
- Size 190.9MB
- Sample260702-bstbjshs8j
- SHA256 0d114ecda1b1db4332d9c75c7206eb770c61ae1bad6253e311dd5174ad822b08
- MD5 99e1034a19ff01cd62348551af215991
- SHA1 0ca4237bd5c6acbfa4611e672af65f40e5974f90
- SHA512 96e8a1f520905254c89f56ad635b7a1fb9e279edd1681ebf99d8a245a343c2d66253638fe246562d6a050b3cd8bd4fecc087f86b9d137a3e2116b47b43d06598
- SSDEEP 3145728:6oRTcL6S7lgZO5u7RQIy7r6bax7WedfC6aG/uJb6obz5D5hQ+uo78E2wpMPFlHc:6oKkQ5Ka7mWsedfCFsu5prB2eMty
- TLSH T197A83382AAF2AC45F82930F3B4174710E3ADAF1C675587E716F4322C2D7B8445F54AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ssentiveusername.sisterscompass - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ssentiveusername.sisterscompass - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ssentiveusername.sisterscompass - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ssentiveusername.sisterscompass - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ssentiveusername.sisterscompass
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ssentiveusername.sisterscompass/files/profileInstalled
- Size 24B
- SHA256 fef7b242986743614a622fa6cfb4be9a868611ae049c43f9b8e2b1589a656662
- MD5 57828e55730e8b0b9cd95ee16b92b0c0
- SHA1 828cc3f0a280afdfdd79ab61c3d1d21772c0d05e
- SHA512 70462eebf1b9e9112fd44111a181121c7f25fd4a0d6cf69684d1b61d5ebf93817c5aec0145d5ba08a0882d654f2b8251f3a348cb5d8c800a0eade21035d352c6
- MD5 SHA1 SHA512
- Path /data/data/com.ssentiveusername.sisterscompass/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 419996a2125cc60ef033c78128f709b4956d6134f44ec47456074755dcd6abd9
- MD5 cfba95072f06bfd97aeacb565e154cc0
- SHA1 cf5f0a78586e4e602ddb960c3239a3ae2d8b17cb
- SHA512 28d9c7469fed4579fa55e013190ffe311ff5b6f870630e674c93f60acb41307da1df9ce5f55b492043e10f9b12c6646a6a277f98e0732e6ae0297c102af628b3
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.ssentiveusername.sisterscompass/primary.prof
- Size 2KB
- SHA256 11299ab7e8134c605f7b9d46c41682eb4f656d6ecdc3009c9b40093331742270
- MD5 a7452d0d60c596a9ca674ebc1f09ce80
- SHA1 af52403de69f0c4f66250ca3a59c9d9e9ff2458f
- SHA512 3749e2f5ac2c3e7a44af009bb15cf061858716f35e45ed82bc030cdcc19e82b102f1cc8a1574ecd5cd2d52448e3573f8aaec9fb7479c79844687ff5eb2a3c11f
- TLSH T169511A7A7A626F9F027D3286F14530B0A7764524C3A0AD17683862F33651DAE5FF2704
- MD5 SHA1 SHA512 TLSH