Analysis
- max time kernel
46s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
05/07/2026, 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IA-Creator-OS.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
IA-Creator-OS.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
IA-Creator-OS.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target IA-Creator-OS.apk
- Size 4.0MB
- Sample260705-aj61lsft2s
- SHA256 bbcc76d23da517b5486b2b43ff364fac073a0e2e967f380d77313afc989ae7aa
- MD5 e2becaf410a8852678775e32c88dd18d
- SHA1 1dd5dd6e703999d796dcc6d0355f0216373ea49a
- SHA512 33b79445e8a2b023af619bf3ddf7e1540c94fff0469d1e2a8753b86134e85fe964870712e7294bb00f863cf6aa5fa60850fb87546b782451f9efc3ffc90aafe6
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCqoulG6hAB76:eZjJk75T15b6tUk6z8RdCqkA
- TLSH T142161242E3E4AD2FCC7781365BF7977916818E02DA96D3038A68B62C1CB7AC04F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.aicreatoros.app - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.aicreatoros.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.aicreatoros.app