Analysis
- max time kernel
57s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/07/2026, 12:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Hokibos898_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hokibos898_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Hokibos898_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Hokibos898_0.0.1.apk
- Size 5.6MB
- Sample260707-pdplpsht4t
- SHA256 a4c640a15716269753da402dc50047e1cb8f332b82ee5af6dae305558fdf409e
- MD5 7cb97d9cfc41481ca110af8c1bd37ea1
- SHA1 13bd04b82739734e25f66edad5d8aed189bba316
- SHA512 08ace5b2d2e85fd2db5738de00213809968a4d7fb26d908895bc9dda5fa075449b2f49ee3255e07ccce93ff60185e8c664d7fa686676f95b824c4315dc9817ac
- SSDEEP 98304:bJ9wFjCTw4hgakG/gQDj5/Hit0JZSoEwWpppWNHFy6SufQnmc9N4sdRgf/oTYrFD:19wCTw4hMGx5/HbMwDFncnlN4oifL
- TLSH T1E356F1C7F7D8992FC87710B2C96E52B126478D028A83DF876D44361C687B6E41F99BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentHokibos898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentHokibos898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentHokibos898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentHokibos898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentHokibos898/files/profileInstalled
- Size 24B
- SHA256 9eb84ec6a05f8a77ec5207ab48b219c7baf378079e56213f11babe8520645494
- MD5 c4ca62318fe86ab473d4535eea2675f0
- SHA1 55fec8477452e960dc53472fd0211c1a31cf2073
- SHA512 7d44c2e34f5a6ad4cc7fa4ebc23e209ed25b3a06e455ca04af67f4d7d317d90015df01cb68a9daedc4bde0e567dfcc7d62bec3db64cd2bfa55a52bb2dbc845cd
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentHokibos898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 39ad126987c61be124df92fe49751ebcab2c75e79c75d33a5cb1bb1e4ddeaeb6
- MD5 0eb3f4482c1fe5615642623c3ff05e1b
- SHA1 5ce2d634786f1e8630d2dc4a435dc81664de2a19
- SHA512 4b94ca876e68d8f73f4e2c6707a66da5ab81b90c091c03889e35a26c0782f1622124eadebe40260e8d36b4455617fc4a6af6e93e2b1c5220bef7e8616e0b9ed8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentHokibos898/primary.prof
- Size 2KB
- SHA256 335a7cb045dafe7dbf7641b215e8f3a4cc8526c81c7456b0fc7d3bac24246956
- MD5 0bdf6faf53183e3b23038d4b949acdf6
- SHA1 0105585510f687f2a11792471ce25e93f4571ddc
- SHA512 80f766083393235eb0b919d8e7a51e76d5388809df61aed0afb6df7ccd8b65ffed1befe8d92b0ed001869ae23cab66419c72fc5a9a3b3d8a176802c5cbc656dc
- TLSH T115515D09D29C812A41315DF11FA341D652513CFE44BB64E3BA8D20D73241E3C5396477
- MD5 SHA1 SHA512 TLSH