Analysis
- max time kernel
112s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/07/2026, 18:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
onepay-tv-debug.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
onepay-tv-debug.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
onepay-tv-debug.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target onepay-tv-debug.apk
- Size 141KB
- Sample260704-wtwhhsfs4p
- SHA256 4f2f0fba2d8eea37f063ce0e97a3c29d3fad5fd6329afe3775e4bbaa97a00bdf
- MD5 216178c9bae1b55cda099f7d5215a298
- SHA1 3b27b8701f8a8366ce85b40a9a52228a2eb3d417
- SHA512 0804ccf6e4ee3346dc565f43d6749c0774f42ff02f4fa63ec35a97afc0bf7ae6e697a28c8a47167e3ef0a8cfa120febc0eea8e45d94950acdfb28b60e934b92d
- SSDEEP 3072:qAk6oDEtmqsBfNJN7/zNia/zNihs7ik8es7ik8A:I1umTNJNrh5hx7u17uA
- TLSH T14DE302A743FE411CD5E9C3306E8EE96358B286D493F01DB6B47EBC6E2C065B02A467D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener it.onepay.suimdbtv - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone it.onepay.suimdbtv - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver it.onepay.suimdbtv - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo it.onepay.suimdbtv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo it.onepay.suimdbtv