Analysis
- max time kernel
22s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
06/07/2026, 12:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
continuity.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
continuity.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
continuity.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target continuity.apk
- Size 3.9MB
- Sample260706-pdvsqaex51
- SHA256 67ed6199c72c2af4a9f1c9b98d3d2dca077621f05776eca3d4d852e084bea34a
- MD5 fcfa6797d5530e64d86c36420476eb75
- SHA1 141ed060d7d7dc53f25f9cc9b29290c6607f0897
- SHA512 6175a881bcef40ffff521ec365b971ce4e563fc83951bef233848505a9362c50a2b3580da633eee9e24631ccc81a7801af8163572b2c5c88fc6194673128931d
- SSDEEP 98304:CJE1vXCABbS/XT7v/Hd8/2ZYJepZGRl1K:CJEFXCABeb7Hd8/T2iy
- TLSH T153160292E7E50EAFCC7A45364FDB1B3126A58F0A9693C3078614722D6D773C90E49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener tv.continuity.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone tv.continuity.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver tv.continuity.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo tv.continuity.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo tv.continuity.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/tv.continuity.app/files/profileInstalled
- Size 24B
- SHA256 522a8c91f661f908cba59624b594a5f6c362530401d5edce456ecefcda878297
- MD5 68f7f3d569668528c109cd0f460de543
- SHA1 1b4511eb5a04bfac9a691f963c29caf6b145a5dc
- SHA512 4b58026e96eba5547be4688e9a0eb78fe7e7d2565315525e150a7ef54256f38155207412740b8539b4f80b1ed7ff9457cc807921eab2a4ba6d22ae4c3bbcccf3
- MD5 SHA1 SHA512
- Path /data/data/tv.continuity.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e49edad621522b809d6dc081b1f7116c22948c82ca1ac86d3add734e5ca5a108
- MD5 5d14a4d0af095df2e9b3d6ce3925d22e
- SHA1 025341e1d251283c93d0755bf84bda1d8d5d67f2
- SHA512 b61ac7cfa80143f89615ae0619bb8509ef66697e20f688cd64e882c6653ac4fea58cc32d59378fb754b5324ee98c8545b8f0740032d032c77c690e0dba1b42c4
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/tv.continuity.app/primary.prof
- Size 2KB
- SHA256 82948dfd1734c8f90713506ecd645ad07a54307aada1be30f358c2aa41e2eaae
- MD5 e79ea00b5e53fa9e5330c0fa283738f5
- SHA1 b41c1560b17cab00fef2e52c05f359b23ec1d1a1
- SHA512 b67b13c02819b6a03ad27ad20f789edfc5f8340f5d7b0052b76236cb4bbf97bd98a4bbef92c1712627276ca6c8a896a01acac223f0e02adead9983d01aaa6e2d
- TLSH T147410BF50E52AA351276E9E72081A7B0B5B310101FFCE1009C205F5E9CE294701C4036
- MD5 SHA1 SHA512 TLSH