Analysis
- max time kernel
102s - max time network
157s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
06/07/2026, 12:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Uus777_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Uus777_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Uus777_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Uus777_2_1_6.apk
- Size 4.3MB
- Sample260706-pgalysay7r
- SHA256 86a7b2439ca552fe4ced2e4813493719f997a4e5877573dca8744856009dc8d2
- MD5 b56b937a7a31c60a97ae1cccfadf87fa
- SHA1 c6829fc35665d973c945adf7d86ad3b1fcb2f79b
- SHA512 e9cfc4113062816e119f9e9d005b009b35bf565a4718bcf6292dc3db2b0d136cae7d90221bef44b57bd4214414b31c8873297d2002433fde65a28ee836940374
- SSDEEP 98304:higseotjf+fDO0W3ybZFzHYJ7cbPcyXC/mODT2T:c9e2mbONyUcLcyYDy
- TLSH T16B261282F768AE2FC8B7C032099A433552568E66C753E70B64583B6D387B7D80F897D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ozzo.Uus777 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ozzo.Uus777 - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ozzo.Uus777 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ozzo.Uus777
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 21a95c6ad32060493eddd52c6690efb92becba9ba41bb0c7f027372f7187f3a1
- MD5 01db49b254956fa923d5ac3d3d06ce73
- SHA1 1cabf2f9130ed46fa2d6d7960c909fe533cf01f5
- SHA512 eec366fffee85eca8e66d4433a087681cceb813b7483d21bf70e5a38ee40182ddee2063565d63eb810ea5168ccafd5b3f62b9700ee86998bda976add0a760022
- MD5 SHA1 SHA512
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 7257089b2bde50e52c5826bab6f0dce8d1e8e58450c93fe0750c8a5c55d411da
- MD5 231e96edc0a2813c53a82f25142d159a
- SHA1 d81ae613c87d7c3428b91ce7be5bceeccb53acc2
- SHA512 3971e7d3ad343fdb4ed2af2d7061f18de61e4af572b6ea1e3c3d159eab1bf30a1f71d27a542f62fbd951ee895b43f211b8d4d58f37d4730228bf39506bf5e1b3
- SSDEEP 12:KQ2p/nh9gzdeWRmBEyPbP/28TM0HHLiOw2:KQ2Rnh9gzKGSP/28TMkrw2
- TLSH T15F72C25493800B42C219D276B0E8E3590D336A19A373CB4B9F918C126C33BC895A0EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 3533509096ba34eab398e1c5eb7f6ef510b813d175666c2f9f08d0c3afd9a0ed
- MD5 f0ad53a8cfdb503a165f5148deae5e22
- SHA1 8a1e615ebdb87cf9b78b6ca8790e801a14a595b6
- SHA512 113d68caeca54218a4ed7cb890cdb16cbee4d133f52594cb18ddd8c4808b58eb38e88437ce5f65876649c1098ec90682b4cfffef50f4d5c202c4d5e59a2ac8bb
- SSDEEP 96:77qtdRUHWsDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:0UHBndjnHt9S/f8JzSV+6D86T0ED
- TLSH T163B3218E0F592700C4A994B0A5E05FB1793F412E97A3E3E12A914475ADF3F21ED29CF6
- MD5 SHA1 SHA512 SSDEEP TLSH