Analysis
- max time kernel
149s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
08/07/2026, 18:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Opera777.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Opera777.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Opera777.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Opera777.apk
- Size 3.0MB
- Sample260708-ws7jdsft71
- SHA256 ca10404c413c8b3e7fdf4d6b5dbd250c685bd374541706126b9290475265779a
- MD5 6ca23c8e6d25b67927b5130f95a1ef8b
- SHA1 b7aecd185b8913d38015cbc857f93b4f6d065696
- SHA512 09302a4df9c5c190ad8341887dd2f3c4cd65d287f4d8b934fe34eea2bb1a514a732f2466a1cd994698cf7251fbb3a4cba7898dc3b9f3b75f6df2e4c4f5df0b4b
- SSDEEP 49152:THlqL36ee/VEug8O3eQEnfJcFrhK4Ak1ETnra6j/ldxjC/9fg8YSwLDlGgPzb2:p4q3/VIuQEfaDoHd8/9o84Lp3b2
- TLSH T193E50182EF65D82EC87745330EAA033212569E1EC597A34795EC32286C776D84FE9FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.p4d_opera777.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.p4d_opera777.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.p4d_opera777.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.p4d_opera777.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.p4d_opera777.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.p4d_opera777.app
Processes
-
com.p4d_opera777.app1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5090
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.p4d_opera777.app/files/profileInstalled
- Size 24B
- SHA256 72d6b1f72c8b5e28d3b8918a9078bb9760d45e465df725b6b6597347b7c0ccb2
- MD5 7a0a306431f993aa6a0bb292a79c2faa
- SHA1 11d6b5e51acee5bfc4b8b2bfe65f7aa9bffdf5c7
- SHA512 e44d4c629d690ecdc3d24c07ab09b2a8e0cf318fcdf0036783957b844e7f1c815c1b875718ca8e43e146fc34fcf7e8fe968342b13587acb141c98fe6443d9802
- MD5 SHA1 SHA512
- Path /data/data/com.p4d_opera777.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e85af1be16000e288f0d0ea1f60e4e7a29ce2d0eb9cb7876e9bf66fa5cbde378
- MD5 90af33dbc9d60f80b83fcb899d76cb04
- SHA1 2227db82f803f95d3fc3fcf8002a2d7f192eca64
- SHA512 3068d2d323ecb13f175680873905bceef7a071ce7a8b3a1dbe2fdc5f689ae98bb63280d5cf807c77140eb897fa62d58026cd304180bb2972e85ea3d2720733df
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.p4d_opera777.app/primary.prof
- Size 2KB
- SHA256 d6ffcc280a3acb6116a9af052f86c18b2677110efda9d987e3c033fbd6d122be
- MD5 e46b5389e8a83d90a075440edec530a8
- SHA1 624ba383d71d4d9459d13c5a3c6ad85663f0f5ea
- SHA512 7955edb0ecacd7e61d74c36bbd9e8cce842eaabecd443b3bf47ba1c1e6516c15bba1bc23e050a3db44e459462bba2406e835acb18e381dfb6c1d49f3ce4631c2
- TLSH T11C415CF18B391201048701337BEB278968D322C0ED9D0BFD78849269E3C4BEE50FC125
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.p4d_opera777.app/primary.prof
- Size 5KB
- SHA256 df038f3ba276f7ad372162dccfe67b5aaae000ba8a5f6f3a62b9662adc1dce0c
- MD5 e2e1d6beb878e14a3758901799cb70f1
- SHA1 fc218197014232e0485372011ae21f0ee1181021
- SHA512 660d189062e6b5ec0849dd358ba63fc100c7027b5ebda1711ce9e277585a618da5a9fae105a45d9ba4403d472c8676d09b6208e4b0ef796a847786e1f14c735b
- SSDEEP 96:b0MEzAsh5g6buYFCYuS5vn5d1t/Hy/6dWHJWNcdPK2usdgnYMWfl7SFn/eLrAs7t:4MEzAsT5q+uev5djHy/62JScdS2usdgC
- TLSH T17BC19E6D3CA7A1E8B3257CCEDA5C9E403F20A51CBF483C1A96CEA55B0C5038944B53B7
- MD5 SHA1 SHA512 SSDEEP TLSH