Analysis
- max time kernel
46s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/07/2026, 12:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Maricuan.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maricuan.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Maricuan.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Maricuan.apk
- Size 9.6MB
- Sample260707-pezhasew6p
- SHA256 c9992fee5fda77bd94988c945e559fd4a5d458ee234772997987c273bdc4aae9
- MD5 79d8c42ef963ac942bc9aec16fc6f827
- SHA1 e7ffedbe7ce739c2321389f65ce9437f4832a789
- SHA512 b963de510cb497911a439711ef3529e044122ed50cfbcc787895166d4f2488bb83979227c3980669d7388d3d1067a04d893f394a2057d6a8bce2c650b6acb9f3
- SSDEEP 98304:WkW1E8W+hkghsFK62tOIU3AaCfjew3VoWoTYrn/z:O68Wt+je2GYz
- TLSH T1DEA68C47FA99593AD67E4235A8BA13107B322E86B7438B571444B17CBCF32C1AF683D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener maxine.run.myapplication - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone maxine.run.myapplication - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver maxine.run.myapplication - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo maxine.run.myapplication - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo maxine.run.myapplication
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/maxine.run.myapplication/files/profileInstalled
- Size 24B
- SHA256 1ca334ac354d109694e1952c718c2a9a46927a88a9667c2a2758ed7fe1bdb72f
- MD5 30ea117e8697fe39ea59651a1164919b
- SHA1 902c1bca1c9219ed0d823ca48d32981bb70ddac5
- SHA512 0c4ddcbb8fbc5cf4d70ab95bba46897fc5c9f917e0fa99d98d977a9daec5e3bbb8051f84adaf23d870608ada052766d5bf0c135f964a150532ad3c2e7a2c2d95
- MD5 SHA1 SHA512
- Path /data/data/maxine.run.myapplication/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f07ab4d6e4d8d57246561a161502901b38bdc983c3e1d32c199a92711b602d9c
- MD5 3f5306fe5728519329efc780685e50ff
- SHA1 d9287c8a400b4f9de108168bd87a2e93a0bae1a1
- SHA512 c1911ea707153f8788e46d4ba398bef45fc56f86459583fc3b6b8ab96d71b1cb7e708fa99afd370fe9a9705528f4f4e4ccd5e74d91555b8a3aad34958444a3b2
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/maxine.run.myapplication/primary.prof
- Size 1KB
- SHA256 0d93148972c4709883550fa421da70b39396839feae8be90119a8e00060e3b67
- MD5 84bae108c3b01a328f34bc0d42182efe
- SHA1 75aed68ca8de5958585cd632756b5fa24384e22a
- SHA512 ad1ff51c0e8f1b2c8cd0743bd84ced087237cc5677f48729ba8bf71f93cd7bcc58e7ce1b88754e6a0c14cfc49671f0f471e02e62c3a3c6727fcb0e0dc028ac37
- TLSH T1D431A24270160A12C69EC8A963BDE3CF4B4ACB1477EA1BD8D2199059CB28831D7B7A06
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/maxine.run.myapplication/primary.prof
- Size 3KB
- SHA256 d4c9699338ec047da5c0c105ac6d9c32899986faea5a230a8fbb93f773e96623
- MD5 db57ec773bb988bd1124f12f7da8f585
- SHA1 ceccf3d1445896a7b80b4902a86b6607446ee850
- SHA512 e9b37d053062781361b857d7406dfa18721670fadea384dc710586a7c888f461d409d54be89522c3de3057ee65d6478a348149ae044c8e680e163a76a43f8527
- TLSH T1BF816CE2AE158A85DFCA78579793930DB6042E6E2DFD0DC70C053D72482D8C9E816B02
- MD5 SHA1 SHA512 TLSH