262aa9243f9df48c26ef319d0eb3bc8c0babd9a1bf70c3494e7e8619e80bdfdf

Analysis

max time kernel
50s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
06/07/2026, 00:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Rs7.apk
Size 8.2MB
Sample260706-agvvkact5l
SHA256 262aa9243f9df48c26ef319d0eb3bc8c0babd9a1bf70c3494e7e8619e80bdfdf
MD5 e7392e6be0edfd7131930b41a0910ccf
SHA1 4311d13a0d3c7c91fd8dd2ccd3f10177fe348018
SHA512 ea8d88858398e3496fe237a80f89562b1f327035ab0714815f488ecd57e133e423cab028c00568649b03deb4e457df1f1e4434ff7b283143f648b73e50f142fa
SSDEEP 196608:felXuHNPMAk4TQPDmVduL5WB8OqgZgHe7UkSKkP2za+:ml7AluDOqgZgHkUJKkeD
TLSH
T1868602C7F7D8A92FC4339072C5AA53B1524B4D068A83DF476E14760C68BB6D81F5ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	in.matka.ff_lux

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	in.matka.ff_lux

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	in.matka.ff_lux

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	in.matka.ff_lux

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	in.matka.ff_lux

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	in.matka.ff_lux

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	in.matka.ff_lux

in.matka.ff_lux
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5028

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 03a6514971971e8bc0a853c9ec31136d8dc8c54ea985a70eb46100600247a98a
MD5 348df2966817928d8abe4b58d8122c00
SHA1 6090687ed222dcaa505ec32bdff6eed9c6fa849f
SHA512 a0ea0969f14ef1994b76266c6248b22e8fb04c254c7c3d0801833c36360a35ca21666175844ea8692ea6c3788541c3428c113c526ed947f8cd68814fe82aaa3d
SSDEEP 12:TLiEy9zmzrfRmBEyPbP/3p/0RT/VM/QCTd:TLApmzr0GSP/3SRT/av
TLSH
T1E37255CEBA209703E273437AA4CAD3D23C34316A4323C9477E500A6C6E8260590A1F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 66f9286d89ccf9cf9a4e762a7a5441982f59f608f44e9ba285d8bd99770a4046
MD5 0e7132f9413047ea265f0bd30dfa6efc
SHA1 8db17c8c92649d3c3e1b6bcfac5dd478c5c4d19e
SHA512 69e6b44227ad9d1b0bf2326d64b2902b004d041d0e5bedf5b0f3da11d31435fc2439e0072d6cda7958445581afc49e110853ab915701120bcb62e7bbac602f52
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hZt1kn+/0Fl6Ek24p/0RT/VM/QCTd:TLQpmzr0GSP/hZtunlFDuSRT/av
TLSH
T16872598DBA10D707E2774736A4CBD3E23C3431654723D61679401B5C6D822825162F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 ff1ae015decafc6773ba3df246f183ae8ac4a5ab1e95e83beed0d2c25d8b8365
MD5 2904f40b4f3c3d27dea4e46069edd844
SHA1 a4775703ab81ad5e15916618a8cde63558938c67
SHA512 3781182077bc578f531b5e6fca42bb8124a880e48c8340a4178f52ecf617b40d1ffdb999260b20e038640aa6f78023e7fdd9ed44c3bcdf59764712eb4fc4320e
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/QH49blqYFlVqV+n+/0Fl6Ek24p/0RT/VM/QCTd:TLEvpmzr0GSP/s499FtnlFDuSRT/av
TLSH
T17E72448ABA20D707F23B473AA0CBE3E23C3431720323C612B9021B1C2D823428262F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 68b3d5de5981d826d23f30edb8d91d1d7fb7ddb3c5a02c400a8343629017cae1
MD5 5d1f8c919ebb65772ffefba6c5c24616
SHA1 fb6e2f9764723bf570eba392f3ed10ebbe7c2dcf
SHA512 94f6adb41572f3dcaef2e4d2ae8e0168b423b0cdc6fba7f2b0e64375fe5e8a9e7dc4366785d55248110e2a02eec5d884d200943cad76245aa6a53c1235cdae9d
SSDEEP 24:TL6Xpmzr0GSP/o4KaGFlolkoX499FtnlFDuSRT/av:T2XArSP/odaGFlgkoI5tnDuiC
TLSH
T11F722289B664DB03F2774B3995DBE6D2383831B20B53D6667E421B1C2D823828132F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 0c8d812da7aee3fa197c6012468f63b27ca80214c0d022c367a2a183eef649fa
MD5 66c8595b6412ed552b097d4b7399f39c
SHA1 807a31294be568094932af54954f1322dde014fb
SHA512 21294eb03f7944469ec07a0240d749d5b88d3d7023109c4e0cb2c7129cd06a3d6a8c5391f472a6ee5205124316744a83baf20fc9cf524793d9af218b477ae433
SSDEEP 6:l9bNFl6ls1IhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wone/nl:TLAEIh9zmzrfRmBEyPbP/Wonevl
TLSH
T13D72C2CD9F202617D6720772B8C993D16D24A21D87379E572AA504B4AE43449A061F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/in.matka.ff_lux/databases/google_app_measurement_local.db
Size 16KB
SHA256 1aee0bb5febde5ec5059021f58a14e8f551834c243e4e3804879e2e3cecc9084
MD5 cb3755faca7cea81daef2155017df19e
SHA1 7f74ee89ee7ce664f76ac5ad1bd88957a2edcebf
SHA512 cb143197e2cfb0b4af0fddd3c1794e6f5972396a8b82ec16bb4884ab968b682e159b2e554a44fbb4a0fc25cc380c08a27860425739be86b26f8c51affe96da90
SSDEEP 12:TLWuEOe9zmzrfRmBEyPbBvOwhk/0RT/VM/QCTd:TL5epmzr0GSNh/RT/av
TLSH
T122725C8DEB10D317D1774736E4C9D3D13D74716A4323D60779500B5C5D4220554A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download