Analysis
- max time kernel
46s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/07/2026, 18:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DoramaStream-TV-v2.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
DoramaStream-TV-v2.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
DoramaStream-TV-v2.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target DoramaStream-TV-v2.apk
- Size 4.1MB
- Sample260702-w4yevsct61
- SHA256 df13d188a309dd9457535e15fe10738d5dc937bf1ba3bee31312d999bcc17ce6
- MD5 1248a3186c3818b57d9f7ec875c2e4c8
- SHA1 effe77acb31f1fa58573ec9210c891f1d32854f7
- SHA512 789a7835117df44e5478eefbd6a997f0d0b8abbb24694f189fd843a498af76be84c4f09a0493b9b1aac9397552d6da3fb2675944decab309d8c4cb16cf1a2e03
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCqEChHfED:eZjJk75T15b6tUk6z8RdCqDs
- TLSH T1DD161242E3E4AD6FCC7782365FF7972A16818E02CA92D3038A68761C1DB7AC44F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.doramastream.tv - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.doramastream.tv - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.doramastream.tv - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.doramastream.tv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.doramastream.tv
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.doramastream.tv/files/profileInstalled
- Size 24B
- SHA256 cb8355bba8762808ae2ab4a5a0007dd1fc551840cf8cc9f4d4f975025655f90a
- MD5 02154ccb6c438df2c8f57ab8f5fe679a
- SHA1 ead53e1906f3b64072517f17a96a5be7786c64f3
- SHA512 13d1a40a58b25ea44e2ce37911ab60a3b12d15d296d95064c9ad4bea41c1a75074ad5dbac0c1437e4841e2dc5650401a2b735e5946388c02bda07082a13cd6b0
- MD5 SHA1 SHA512