e7883ff721e4fc830e82b402b88fb6e6118d32d3eae2611af7f9890bca239c92

Resubmissions

10/07/2026, 10:27

260710-mg2z4aaw5w7

10/07/2026, 09:28

260710-lfrx3agy3j7

Analysis

user interaction
yes
max time kernel
17s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/07/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Axiscreditcard.apk
Size 10.3MB
Sample260710-lfrx3agy3j
SHA256 e7883ff721e4fc830e82b402b88fb6e6118d32d3eae2611af7f9890bca239c92
MD5 bd50cfb1c1c7c55a511438c7e3e08769
SHA1 da7155ebdf6aea7a8132bc1e873704bd6d6471d8
SHA512 59f0e8a33b9d048d3c86808e1d86a69aec1c12bdbf42ea9d796a79281aece87effe00574a4b0f78fa07a20a118f0124d186af77def6b180564eb330fc217b9ba
SSDEEP 196608:kFGxaMDspr6A2Mb4lJiUIaVTWeYtuAL/kq0JMWx3Zc2fmMWh0SVTuJeT49Umw4z:IGx5Lv7K94TWeuu1MWx3Zc1VTuJs49Uu
TLSH
T11DB622CBA3DAC656E81DC43B14E99372638E5D4D45B683239383B7493CB67931E09BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.avdkfhdb.android

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.avdkfhdb.android

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.avdkfhdb.android

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.avdkfhdb.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.avdkfhdb.android

com.avdkfhdb.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks the application is allowed to request package installs through the package installer
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4823

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

temp_info.apk

Path /data/data/com.avdkfhdb.android/files/temp_info.apk
Size 9.1MB
SHA256 34c01c3c50f24e3b21add3a0ac0c331ec01d5cbd6484e0fa4c4e914944f137dd
MD5 15938bb0e5041ac01dc1f67b0b486bef
SHA1 5d41d524be359fe764d732d7776288f7762c43cd
SHA512 6de2cdc651bc9d3113569839c0f64442d0a56791242336124791b097ac170e7842b56b1e5fe41edc5f813bc77fc7cca2ba3ef959b598ad7f14cdce3f03969cc6
SSDEEP 98304:kw0i5XpMrOiQrZ0E6Xqg0zQY1U1CPa+UVcBUN9xM9V3iHOysINfAo3uNK8Ck059a:kF6XpilB0zQPET/m7uy1hsy0J3F
TLSH
T1FCA6F18BA796DB16D83B903B20996325134F4D448AB5C2275B477B8A1CF77D70E0ABCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ۦۖ۫

Path /data/data/com.avdkfhdb.android/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫
Size 8.4MB
SHA256 8cf96152b47b87739534b0b92bf62c855c9721d74daafa74840cbef6498dde98
MD5 6d61e6c27350f907fefffbf0ea3afecd
SHA1 0550bf9e9ef3b30985f4245305b458a88766ab39
SHA512 26f5a437259769cc3ff399685714b4a68cec66e04d7281572f3393c58b6eff1967e7d4d3da50a2a392bc36c285a217ab4d82ebc9ea95b41d81e48298635d2b71
SSDEEP 196608:hVcZad1dWOWiqaw3S4G65pcdrxHZj3TLBz1swa2gvG:hyZ/NtRlG65pIxFTLHs32gvG
TLSH
T1CB9623D3F768962EF63C81360AE683B067169D4D4893D643D630358EB87216E6E7CF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ۦۖ۫.

Path /data/data/com.avdkfhdb.android/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫.
Size 8B
SHA256 c78da807623c65fcada39c938ff80b27c74078659a23767515df3660d0011c08
MD5 7175c508ac8c71c64fd5543d6dab243b
SHA1 b9f0a3817f2bc6d94f22b9d3f9dffff56bb1bb24
SHA512 447eb308e8a8a98e2a5e34327fa03b56bbe36f10a4e1ba042fbe23b111e6e8398a72f1c9cf41f240f43cc067362db8e7d7a656424be6cad29c2752fcbc387ce8
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads