Analysis
- max time kernel
46s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/07/2026, 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IA-Creator-OS.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
IA-Creator-OS.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
IA-Creator-OS.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target IA-Creator-OS.apk
- Size 4.0MB
- Sample260705-aj61lsft2s
- SHA256 bbcc76d23da517b5486b2b43ff364fac073a0e2e967f380d77313afc989ae7aa
- MD5 e2becaf410a8852678775e32c88dd18d
- SHA1 1dd5dd6e703999d796dcc6d0355f0216373ea49a
- SHA512 33b79445e8a2b023af619bf3ddf7e1540c94fff0469d1e2a8753b86134e85fe964870712e7294bb00f863cf6aa5fa60850fb87546b782451f9efc3ffc90aafe6
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCqoulG6hAB76:eZjJk75T15b6tUk6z8RdCqkA
- TLSH T142161242E3E4AD2FCC7781365BF7977916818E02DA96D3038A68B62C1CB7AC04F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.aicreatoros.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.aicreatoros.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.aicreatoros.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.aicreatoros.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.aicreatoros.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.aicreatoros.app/files/profileInstalled
- Size 24B
- SHA256 aead51040de556a8fc34a3d2bb773c0eae4a1a86abd6567c7e0bdc2076f1744f
- MD5 f24bf43195a362a55ed2a516e26c8869
- SHA1 23e9ad0153bc227c6d78fcefa16239ed59ceb200
- SHA512 87f5f2b5415bc9c50bfb982e505e6cec19a23ea4729a5e9f5e7a2baa20a052ccaf2f67df0b697766bc8f31ad22125e6b889cb542055d00c54a2c8bff02d05bd8
- MD5 SHA1 SHA512