Analysis
- max time kernel
117s - max time network
92s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
07/07/2026, 14:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app-apk-a825fd7f1da54aa7974e2b8e11741596-1783433498.apk
Resource
android-35-x64-arm64-20260325-en
4 signatures
120 seconds
General
- Target app-apk-a825fd7f1da54aa7974e2b8e11741596-1783433498.apk
- Size 31.3MB
- Sample260707-rjhrfsbv21
- SHA256 af70bfe70967b178aee6e30b96230a255e01e3b8034e714532bc52593b2f2878
- MD5 b5f172fd67d04f2508d315d6b042cec9
- SHA1 68ab8080d84f4f81e4ee28a2a061cdab3584398c
- SHA512 d2731dd792bcd675bb71f8b7fcf9882a6c8dc98d9c6940f8c8e78867d20257e4a22a3151b854090d51785ee8361d85a2ccbd0cf7bead971b5007b48c3b60a288
- SSDEEP 786432:wg9LmC8raFX1RAl5WPt/OPrYPOjodpF/obRb2I:jSC8raFnA8IsN7xq2I
- TLSH T1FC7733C5E7D8992FC8770036C9A667F9054B4D26CE839F872958320C69B76C41F8AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model app.edgeone.app - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener app.edgeone.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo app.edgeone.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo app.edgeone.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.edgeone.app/cache/oat_primary/x86_64/base.3349.tmp
- Size 407KB
- SHA256 79ac3b5b3d7bd52987376880cc2f941387f0a917443febdeecca0b7fce02ca8f
- MD5 8188ecea489c5516142403de32c2281c
- SHA1 8b8e9808406e1402f3a449c8d278eb2af655ff82
- SHA512 4210fd80472b5c668ab37645e619ed62db1bced16bc4bf603d0b4e905da9dd2dfc8560a6bf39e3e8c8279fd4365ebdab5bee5fe26edbbc0fd54e90c122d196be
- SSDEEP 6144:H0ns6FJWwmNvA5qZejKibk+Y2FDzvxPZsjangJBs+MzRxzPwjYxxQnBX8gk:He/5NjLhXsjanqBkz1AnBX8H
- TLSH T195944B9FBA634011C19FBEF78E4A45E8F928C015225B1904A4F5377EA437F29E760FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.edgeone.app/files/profileInstalled
- Size 24B
- SHA256 24b4f945f14aed4c6032b2e49ca8ecbbe2a58b49394cc33c5f82453769d9b0ba
- MD5 a57eae2fe12a9c55484014e3ad98dfef
- SHA1 9ce0a912f2e24e9ec22d6dc2a4e267ab1b2dafbc
- SHA512 365df6723a2b36fb73690deeb5a28cb1699fd98cb26c63fc50ecfebf15d23f7bbf3dbf125605b9e9eba5ae9d302d94ce4bd26f5f55e7e9f3d41167a005713916
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/app.edgeone.app/primary.prof.8vxApC.tmp
- Size 4KB
- SHA256 1ca90d8bd68493f8b89e1c6825bd8a64a04be82245e145327186299a6af1b8f8
- MD5 3a70b916fad758ac0857e9ed6c7e1d05
- SHA1 0f80396be890d14deaf86ed886c1650351973b5c
- SHA512 4a03598f4623ff9305464a59438b5d61d11c4b2449dd968d17bcbc7a9c02e31497f5f788700d066193628b45ab7c65eb192f7ec34138f02cc6f668b79607aa23
- SSDEEP 96:IlkORIKXmBLsmtwxp+ZhwbpB19qL6Wcl7rNkwkjbLByc:qkORuBg5xFB1wL6h7rNkLbLR
- TLSH T1A4A16E2543EB49236F0E8AF74E944522906487BF0457E26DB30CFBC7E485D9619F386D
- MD5 SHA1 SHA512 SSDEEP TLSH