Analysis

  • max time kernel
    69s
  • max time network
    155s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    08/07/2026, 12:20

General

  • Target
    disdroc.apk
  • Size 4.1MB
  • Sample260708-ph4lesfv8v
  • SHA256 914b47485d9c326e7c2f14e872fbc1d3dda31818573332561fce0313739bb6f2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • online.disdroc.app
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5033

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation2465659490202953985tmp

        • Path /data/data/online.disdroc.app/files/PersistedInstallation2465659490202953985tmp
        • Size 569B
        • SHA256 66a55d3d4d174fc69789a433a6a7faff11da60756f2b1693144a28a4d5899aba
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8589752865288120572tmp

        • Path /data/data/online.disdroc.app/files/PersistedInstallation8589752865288120572tmp
        • Size 90B
        • SHA256 7f3db11f589effd5cc2ff207c7ba89e86c33ebb2a14eaaa1a92f5cf53b63f1ec
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/online.disdroc.app/files/profileInstalled
        • Size 24B
        • SHA256 10a6d5509acf7c1de0f32ffad1d6adaca23e41942d57ad4e171f46da143e503b
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/online.disdroc.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 b2c246c546257e329db9889dd253e1c489fd8ae9624b38e1f0341a745e9ca42a
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/online.disdroc.app/primary.prof
        • Size 2KB
        • SHA256 f2b8ceea446be9edfa7a29e88bbf7df2412bb6c6acff0a2b239cabd7fc6dd2ea
        • MD5 SHA1 SHA512 TLSH