Analysis
- max time kernel
138s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/07/2026, 00:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Rajatoto4_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rajatoto4_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Rajatoto4_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Rajatoto4_0.0.1.apk
- Size 5.4MB
- Sample260707-ah3a2abs2n
- SHA256 dec72ea8084dea9b7aef32b43a7ced2681ba1bf8e2c3d749a3928c5c728be451
- MD5 eacdd2c96ef06dc9d4879fac7baae4c0
- SHA1 ee00b05a22bed0f98a956948362cd2e9c2528ae5
- SHA512 1a0706d9dd949a1a50209acf167dfa9625e4840e39b7bcbedd55d0e9c88126028b478b7ce03bcd08b211c82c9b678568807250d42a673ba84d5e9516f77fc2f3
- SSDEEP 98304:mMXm/pxD0oAWpmFpOb2Zjgon0IZ8YnPtyppp+TL/lXiwfpvGzlc9N4XddinE2oTU:/m/pxDAemCqhyYnVhffuUN4tVw
- TLSH T1D34601CBFBD8992FC87710B2C96E52B156474D028B839F83AD44360C697B6D41F99BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentRajatoto4 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentRajatoto4 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentRajatoto4 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentRajatoto4
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentRajatoto4/files/profileInstalled
- Size 24B
- SHA256 5281b66fd145a58477a7076eb9a36e39875ba97be1c6b8de28f88c7015bde200
- MD5 6bac3358e733c8fa0ce31f01d16c062d
- SHA1 377dae20adfbe37e213319c77f004a6351e338c6
- SHA512 2561b5bc73e5bf6941575a96b1ca0022b0559c4acc0c5927aded1dea37213d88607e0e7f5ee0a6e095ca585b13f35f2b7b97dbd4aa4b486cd69037100304df2a
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentRajatoto4/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b8be3ba76b91b0194ef84dd2a3105581066e9e30a7df350aa955a96ce7de395b
- MD5 a62cd53a6da06c12ceb0e648c23e6ff0
- SHA1 17d6def7620fe43b5917399df5349bc3d84c5750
- SHA512 0b8b6c12d67da6557c86b9697083269066a8eceb18c2f85356df00ebd373e984cb4add114f1bf5d6cb2ab72913113a3128f03513ccac90536ecde8e3f57fe7bf
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentRajatoto4/primary.prof
- Size 2KB
- SHA256 cd9fd49b918bfbef2cbb80abc3d447794090e97d0dd44dd960630e7de5bc66fe
- MD5 053f3578871c77d7126b6bc076c67511
- SHA1 991978a3d9e8ce20ac9b30994ebdc1b95942fa2c
- SHA512 77038e215772e1eabda59cbd45cf7ed2ec569ad7aff41db285f24e5c9ba9ce44c5e9dce48ce79b48465c89ec98bfdec3a79d8c27a22bf6eb1ea9b4c81af3b1f7
- TLSH T131512A49BD0F502543B0EC12530788755AE37A4C88D978B2AF9CACBE6E1573E20437AA
- MD5 SHA1 SHA512 TLSH