Analysis
- max time kernel
136s - max time network
154s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
06/07/2026, 12:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Uus777_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Uus777_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Uus777_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Uus777_2_1_6.apk
- Size 4.3MB
- Sample260706-pgalysay8m
- SHA256 86a7b2439ca552fe4ced2e4813493719f997a4e5877573dca8744856009dc8d2
- MD5 b56b937a7a31c60a97ae1cccfadf87fa
- SHA1 c6829fc35665d973c945adf7d86ad3b1fcb2f79b
- SHA512 e9cfc4113062816e119f9e9d005b009b35bf565a4718bcf6292dc3db2b0d136cae7d90221bef44b57bd4214414b31c8873297d2002433fde65a28ee836940374
- SSDEEP 98304:higseotjf+fDO0W3ybZFzHYJ7cbPcyXC/mODT2T:c9e2mbONyUcLcyYDy
- TLSH T16B261282F768AE2FC8B7C032099A433552568E66C753E70B64583B6D387B7D80F897D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ozzo.Uus777 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ozzo.Uus777 - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ozzo.Uus777 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ozzo.Uus777
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 3d507b83f8409d467f19aabf10a06383b36e7ef3fd147e84dec91ee2a093f31d
- MD5 68cdcd6eaefda77ec25e678fe1e6777a
- SHA1 b2475fc3b094fc1baf6c732fdc4ef721255a0a9f
- SHA512 e12a045df9a512a3ee6ee1d9fd82b0f146450292f2916de03da8bc1ed281b28d6aa24e8c206c0395c9385a68a4377ebf82f8b6442d58f40e9d4e4bf2455781e1
- MD5 SHA1 SHA512
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 1ed4d4c6cece66cdab090e1b14db17233c72415f845a9dd5df6cf33ce4b826e4
- MD5 cf9e10734679dfb27ef1dcb5f5bacf87
- SHA1 d2604b99b9c1f853d8e3c361a7a80824524672ce
- SHA512 65c4273369ba180d205b8acfb6b6c8a9e1ae939943d77152a93407b70f3dfd57e25b14ee3d8adb67cbf03494ebcdeedf1308fd1f3b118ca81f3610f410f0fbd1
- SSDEEP 12:KrbnymlebRyzdeWRmBEyPbP/Zb58Lf5Ow2:KrqYzKGSP/Z2jl2
- TLSH T1B472C29697900672CC1857B390C5C3040D65661C5372CB8F668514212C01FA9FAF6D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ozzo.Uus777/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 9f77b798e885f1f30169ab3eba2d8d3e30603ecc36622037c5fb2fd6e69d52ae
- MD5 e70834462547fe3c9a8a5c474fbe317c
- SHA1 07648135c7b4880f86c6d263a2e99b8ec2a00a7c
- SHA512 939c6df991197328b5853ef2808a7c5e7f947a39698ab09068364b3a66eb63b28fa9093b3000042ce461ea277206389152f3e044850312457837d2fc86a1ff25
- SSDEEP 96:2sIVwiYj5On+6klMESrz4CzGRp7WzDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D865:xmndjnHt9S/f8JzSV+6D86T0ED
- TLSH T189B3118E0F692600C8A964B1A5D00FE1793E512E93B3E3E565910075ADD2D31EF7ECFA
- MD5 SHA1 SHA512 SSDEEP TLSH