Analysis
- max time kernel
46s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/07/2026, 12:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
powerman-app-11-02-999.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
powerman-app-11-02-999.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
powerman-app-11-02-999.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target powerman-app-11-02-999.apk
- Size 2.5MB
- Sample260707-pgdcvahv9v
- SHA256 c01dfbb1d2e0e98601045e7c5fb617236cd222a6b80f0de0bda9300e267bbd21
- MD5 5f6f469bf05c5d894a928b6cd74ec6fd
- SHA1 920c96d4a2911b725c809f73b2028bf284ce918e
- SHA512 1d438efaf41d63acd050e8b87da22c14345796a98b2dc94bfae43344cd53261efa134778de8369abc8cfca5e1f0027200e6be185fca72c1ef03acd96b45a83c6
- SSDEEP 49152:hBb0BvTaBlc8Q0zPT+0uTI5Mfq43DpTOJBlxG/nsqprQOgclgS29:KaBLPT+0uToMfD3DpKXG/sqpr1gcW9
- TLSH T191C50182FBE52E2FCDB784324F5A46315352AE17C293D7079898362C68776D44F8ABC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.mywebapp - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.mywebapp - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.mywebapp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.mywebapp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.mywebapp
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.mywebapp/files/profileInstalled
- Size 24B
- SHA256 850987940fc736c71230e05d3d9a7edafa0e3b6e4c07e7b50703aee979c49479
- MD5 4bc03e1b334758997bd411b40893b89f
- SHA1 108a51f53de08f5363decb1e710322c0f5893cce
- SHA512 cd0d5d26bbc878fb641d234fd4a452cbcd529a39d707dbfa55397292d4376acbaba21eb6eb8ab9b883a71aa37a94b946c879c5f3a1f335e9e354e0705fc75f9a
- MD5 SHA1 SHA512
- Path /data/data/com.example.mywebapp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 35eacf51446a473349497fe044eb9f33d86f9b697e90bbdaa7a5d93311b3238a
- MD5 e70ef3069c08f1a3c234e3d6fbc97da6
- SHA1 9d4eab0ce685824c26d6893e6528e5f6f603d977
- SHA512 cc12c4e0b8979ee863e2fba0c5122b53b1e1eb1e1fac10e9e8338a775f616fb00095aaeea031d7a5658e4f9eba2d97d58d9d9712d90a3f9284ad3f00418c2de0
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.mywebapp/primary.prof
- Size 1KB
- SHA256 98ca634267c0c9ec122da10b4dff1b4e67d37185e5864b483b1fbef210f8c47b
- MD5 921b20ecf59c901f351b1a5369a9502d
- SHA1 8b849a85bcd6f06ef7df48b5f2b2a1edded1f09c
- SHA512 d565a9ce1964f16dfd0f21548344bb0a28f271a60be614e3649a0f3951e6b2dcd41f278fc193fc53f1e11440d1ddb836d963910ed2d03c77d77374c60a725a54
- TLSH T1D4310B053618E3A7D1465B69B5ABE3240AC0F7633870DF8D2B1F7551832623717F502E
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.example.mywebapp/primary.prof
- Size 3KB
- SHA256 73793419f5c88cc20a79afd9006499184acbdbf8b78f4bf2e214fab7405df9a5
- MD5 25bd5a8bbb1b49793c343957a6842edf
- SHA1 3b1eebd8ed866a1541b6df42ae85f2ccdc486814
- SHA512 3199d7a83dd8e35cdba161a85d07378f84db0971b190f7e0274fb4f7f9eb687dd367c12caa354ababec4d17f73e9afa4e82b4873d16c3ef116eaa2ec01e94730
- TLSH T1F2614C4CBCF8F30D5C95AD95CBAD4181536DCA001F3AE91E0EE414F466E635067C0FA2
- MD5 SHA1 SHA512 TLSH