Analysis
- max time kernel
24s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
11/07/2026, 08:53
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
IndusindCardNew.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
IndusindCardNew.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
IndusindCardNew.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target IndusindCardNew.apk
- Size 2.1MB
- Sample260711-ktsk3sgw9w
- SHA256 abf280926c897496ba17bffec67639fb01cd10903e170122d19c000e5149f518
- MD5 e85d2f123f7ccb56f37646b2e653e94a
- SHA1 0ade14ffa1aa6c0354acae79d2880124f9ad0a89
- SHA512 4f658c482235eb12d3b8d3c509947b282c45ab00b7cc2f8b733bf789385daadfb13d3f0b7c531a3636cbb2924ca7ff89479962d974d65576e4076a073b011cfb
- SSDEEP 49152:Sr191d3kgdFjyUJg7R9YUDt3h8k8sYcXOiET4QwPG7HhPhjBQMBo/UBNEZwfcO3s:Sr191d3kUFXJg7RC2ckfYw4w6Ph9+QNy
- TLSH T1F0A56D6D7B866C2ED5754A714CFB01B962870E0D4881EAEBB4A430483C77D9C2F59EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.indus.ind - Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.indus.ind - Requests dangerous framework permissions 9 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to monitor incoming MMS messages. android.permission.RECEIVE_MMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.indus.ind - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.indus.ind - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.indus.ind
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.indus.ind/cache/output.apk
- Size 5.5MB
- SHA256 c5c1ff750b03dcc524597245916218ba1a46971e95c36fd7f724eb79a8ea5191
- MD5 cdfb2adaa7ff412f28ff386a71df43f6
- SHA1 37e9831284b92e4cd744c3c0f411f16b98a221c8
- SHA512 b1fd1265397f0ca8dc605fc1e5a23c5bde3bfd6ff70cd8eb5fd99790cac9bd08978271487810b7cdee4d4379a32fa349e0466bb613f91f282ed249f6f404430e
- SSDEEP 98304:hMGIEq32G+6XfD+Q8vqiMtCc7X8TFDfJHBqSSnhwiOzFK30g7WdEqnDUB:IL+vqiMc5xzJHgSSLWFY0IWdHDu
- TLSH T15546F186B78C54AAC1B9063E89360236D75FFF25878387DB6D40B62889B71944F39BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.indus.ind/files/profileInstalled
- Size 24B
- SHA256 04119ae6d80201363c06b4eba1426cde4d33ce9effc07b71fe135b9e1f3b34c3
- MD5 9daf8d8040a686c59edc6ec04a74d08a
- SHA1 df4bcac09b69034adb288a61eac8427ee0a8816f
- SHA512 57779920203606c4066d3ed2d0fc067774f0c4ef14d45d9ed4a4a9deaf98969f9962a6eb05730aa717d0899f4bfa0865b0a0d555529067361aeb0efbf624695f
- MD5 SHA1 SHA512
- Path /data/data/com.indus.ind/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a8cc9bc53ff090346d9e5da71d8ffcc8759c76a0b3618398d6ff2326e13bf129
- MD5 7b3d74a6c6d973ec7b78158d847bf711
- SHA1 f3d6e0f6f9756dfdabe098c7669cef114855db8f
- SHA512 ba9c1f7e45af6212d6a7c403c111d70239debb5987f698b07e2d041395c0aed1817476b2243f44ff36d375c81bc11a1a0fbfda531446b28a60fbdf9ff8079e08
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.indus.ind/primary.prof
- Size 1KB
- SHA256 b6e19ed1686536b509f5262c79e67fb2909de890d83983663b62f3903d84381f
- MD5 72c28885213d8ab5f19e1499b7857d30
- SHA1 6747aaca37212d77df4c02af5dbbdec3b2af56d9
- SHA512 67ff26dbfa7ffd12990a8697f84573ee46d05f74aff2bc3f63ef4c333f4c26bc36d7151ab0383e2e3836d03755a4e2c088fd0da3ff493affe708c69dc84286a9
- TLSH T1A0310A1B8DDCD0FC7019CE514AE84A0B85D5F4111D0786C192AECCAEEC725903A78F5C
- MD5 SHA1 SHA512 TLSH