abf280926c897496ba17bffec67639fb01cd10903e170122d19c000e5149f518

Analysis

max time kernel
24s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
11/07/2026, 08:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IndusindCardNew.apk
Size 2.1MB
Sample260711-ktsk3sgw9w
SHA256 abf280926c897496ba17bffec67639fb01cd10903e170122d19c000e5149f518
MD5 e85d2f123f7ccb56f37646b2e653e94a
SHA1 0ade14ffa1aa6c0354acae79d2880124f9ad0a89
SHA512 4f658c482235eb12d3b8d3c509947b282c45ab00b7cc2f8b733bf789385daadfb13d3f0b7c531a3636cbb2924ca7ff89479962d974d65576e4076a073b011cfb
SSDEEP 49152:Sr191d3kgdFjyUJg7R9YUDt3h8k8sYcXOiET4QwPG7HhPhjBQMBo/UBNEZwfcO3s:Sr191d3kUFXJg7RC2ckfYw4w6Ph9+QNy
TLSH
T1F0A56D6D7B866C2ED5754A714CFB01B962870E0D4881EAEBB4A430483C77D9C2F59EF8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.indus.ind

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.indus.ind

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.indus.ind

com.indus.ind
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4863

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

output.apk

Path /data/data/com.indus.ind/cache/output.apk
Size 5.5MB
SHA256 c5c1ff750b03dcc524597245916218ba1a46971e95c36fd7f724eb79a8ea5191
MD5 cdfb2adaa7ff412f28ff386a71df43f6
SHA1 37e9831284b92e4cd744c3c0f411f16b98a221c8
SHA512 b1fd1265397f0ca8dc605fc1e5a23c5bde3bfd6ff70cd8eb5fd99790cac9bd08978271487810b7cdee4d4379a32fa349e0466bb613f91f282ed249f6f404430e
SSDEEP 98304:hMGIEq32G+6XfD+Q8vqiMtCc7X8TFDfJHBqSSnhwiOzFK30g7WdEqnDUB:IL+vqiMc5xzJHgSSLWFY0IWdHDu
TLSH
T15546F186B78C54AAC1B9063E89360236D75FFF25878387DB6D40B62889B71944F39BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.indus.ind/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 965df00c0cc5dfef8e76b2985e4c0770485a4868fb531efe47059dc7937112fd
MD5 3e14a278d48b48a7596bc524191c77d2
SHA1 3fad5bcde7404fc81bdd15f8d4c578cc3be9727f
SHA512 151fbe889803d343dfceae413770b4a8243b2fd611a2902e6483a26c65628b211aacc76f45ffc54540d418356e67ea461bb109f37edf173078ba4433e8249632
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.indus.ind/primary.prof
Size 1KB
SHA256 b6e19ed1686536b509f5262c79e67fb2909de890d83983663b62f3903d84381f
MD5 72c28885213d8ab5f19e1499b7857d30
SHA1 6747aaca37212d77df4c02af5dbbdec3b2af56d9
SHA512 67ff26dbfa7ffd12990a8697f84573ee46d05f74aff2bc3f63ef4c333f4c26bc36d7151ab0383e2e3836d03755a4e2c088fd0da3ff493affe708c69dc84286a9
TLSH
T1A0310A1B8DDCD0FC7019CE514AE84A0B85D5F4111D0786C192AECCAEEC725903A78F5C
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads