Analysis
- max time kernel
49s - max time network
156s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
06/07/2026, 12:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app-debug.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-debug.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-debug.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target app-debug.apk
- Size 5.7MB
- Sample260706-pfcd6aez4x
- SHA256 8b018d7376f28a72144277b4a360a6522f64f7d0219b0d173213010baf4b410c
- MD5 f91ad13a8f5014b514280945f16d5bf7
- SHA1 eb6ec3ef9ecee316a1469ee0a926432a0044505c
- SHA512 b39c30f7e45c28435cf20b58da2deb002ed56c1edbe9c6e3f11d8221a825a80adf8e50610622f753c4c3565cf345808efd82d7e6539e196ed454078e27aa363f
- SSDEEP 98304:rJuHO3i2eAoTYr6q83aRznncFMplq4Geusfz1+2PcwWZ5907m05ve2VG:duM38KRrnoMpNGFuN+L0601G
- TLSH T12356F1CBF788AA2FC47710B289BE527651474C168A838F436D58720C69BB5D42F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.nightboxott.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.nightboxott.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.nightboxott.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.nightboxott.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.nightboxott.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.nightboxott.app/files/profileInstalled
- Size 24B
- SHA256 1d9d41c09fbcd097432760b82ee15b59a20b2f8c471dd1cf5fa2a40c6733137e
- MD5 23ba745e37008e4fe07bf6ff3c3b2118
- SHA1 10b7dfbb22fc48c9d16222b19ed1f541f8e466c2
- SHA512 864e642379a759671f8c7517b6ac91100f3934dae05fd48022f2e1cc80187d95003b676d771bc67a1ae3e1834caf2480cb04d4cddac6c38017473ce9cc9fd5c1
- MD5 SHA1 SHA512