Analysis
- user interaction
yes - max time kernel
25s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
10/07/2026, 09:51
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
IndusindCardNew.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
IndusindCardNew.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
IndusindCardNew.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target IndusindCardNew.apk
- Size 2.1MB
- Sample260710-lvl1csg12m
- SHA256 abf280926c897496ba17bffec67639fb01cd10903e170122d19c000e5149f518
- MD5 e85d2f123f7ccb56f37646b2e653e94a
- SHA1 0ade14ffa1aa6c0354acae79d2880124f9ad0a89
- SHA512 4f658c482235eb12d3b8d3c509947b282c45ab00b7cc2f8b733bf789385daadfb13d3f0b7c531a3636cbb2924ca7ff89479962d974d65576e4076a073b011cfb
- SSDEEP 49152:Sr191d3kgdFjyUJg7R9YUDt3h8k8sYcXOiET4QwPG7HhPhjBQMBo/UBNEZwfcO3s:Sr191d3kUFXJg7RC2ckfYw4w6Ph9+QNy
- TLSH T1F0A56D6D7B866C2ED5754A714CFB01B962870E0D4881EAEBB4A430483C77D9C2F59EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.indus.ind - Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.indus.ind - Requests dangerous framework permissions 9 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to monitor incoming MMS messages. android.permission.RECEIVE_MMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.indus.ind - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.indus.ind - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.indus.ind
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.indus.ind/cache/output.apk
- Size 5.5MB
- SHA256 c5c1ff750b03dcc524597245916218ba1a46971e95c36fd7f724eb79a8ea5191
- MD5 cdfb2adaa7ff412f28ff386a71df43f6
- SHA1 37e9831284b92e4cd744c3c0f411f16b98a221c8
- SHA512 b1fd1265397f0ca8dc605fc1e5a23c5bde3bfd6ff70cd8eb5fd99790cac9bd08978271487810b7cdee4d4379a32fa349e0466bb613f91f282ed249f6f404430e
- SSDEEP 98304:hMGIEq32G+6XfD+Q8vqiMtCc7X8TFDfJHBqSSnhwiOzFK30g7WdEqnDUB:IL+vqiMc5xzJHgSSLWFY0IWdHDu
- TLSH T15546F186B78C54AAC1B9063E89360236D75FFF25878387DB6D40B62889B71944F39BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.indus.ind/files/profileInstalled
- Size 24B
- SHA256 158d11f2c78a440a3f47d985f739818ef6213c1d3b985e54532cd6c48cdf4199
- MD5 798c2cd6e422e23027954208e9e694c2
- SHA1 0aedcbf8fee1362c3c1117539a2030a4082d5197
- SHA512 da6eb2cc0bdd90ab72340f3f2e78d6644c032035930a7fbad6fac17407eb14513c1a61ea76de0b1ea636e4d34afc37a0e8a4f484c6821ec0230ffb9826707dd0
- MD5 SHA1 SHA512
- Path /data/data/com.indus.ind/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 3fc06d36e03a8fe03fde8d016d36f97d2cb36b28cb1101bcb0076605b2f5f250
- MD5 fffb8d33280ff7ff4583c19c27b873c5
- SHA1 16c3ef054f4f4e470e07eba2b13501873a79b2e7
- SHA512 7c2e2544cc5963d32502c71e31878654fffc12d7864853f937c750bfc358dfab3cb6937207a412358369db3c2a6eff05a04fb3b3032b71217a9c4fe8bd67133c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.indus.ind/primary.prof
- Size 1KB
- SHA256 b6e19ed1686536b509f5262c79e67fb2909de890d83983663b62f3903d84381f
- MD5 72c28885213d8ab5f19e1499b7857d30
- SHA1 6747aaca37212d77df4c02af5dbbdec3b2af56d9
- SHA512 67ff26dbfa7ffd12990a8697f84573ee46d05f74aff2bc3f63ef4c333f4c26bc36d7151ab0383e2e3836d03755a4e2c088fd0da3ff493affe708c69dc84286a9
- TLSH T1A0310A1B8DDCD0FC7019CE514AE84A0B85D5F4111D0786C192AECCAEEC725903A78F5C
- MD5 SHA1 SHA512 TLSH