Analysis
- max time kernel
105s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
11/07/2026, 12:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
gmbuy.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gmbuy.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
gmbuy.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target gmbuy.apk
- Size 5.7MB
- Sample260711-pd66rabx81
- SHA256 c9108fe5862f9006e9f79977c58a89ac7daf8c2bd02b0b92fc4a6652ce9acd31
- MD5 8fd410fbf4448d8e891b2c4216bb5af5
- SHA1 532175e59bbff58481b2f389d2793aec214991c3
- SHA512 dbd22bbf5ca88735e5e9c42da33b72271fc998b9d45fa0af74bdd12833118766147d08d5c424e7bb18fe883be637d58d12ed751f089c3c06dd6c21e7a8844249
- SSDEEP 98304:WG47ccUTpnCm6YF9W5PIlwi8bvJxIj5Ytl0D2Qar3OSCN0Kc8GcxVN0oTwrU4GC:74QPkHYnW5PDi8zJIel0dk3LC1c85XCl
- TLSH T18E56F1C6F7D8992FC8375072C9BE52B151874C168A839F836D58720C69BB9D41F8AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.gmbuy.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.gmbuy.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.gmbuy.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.gmbuy.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.gmbuy.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.gmbuy.app/files/profileInstalled
- Size 24B
- SHA256 6cbbc82e6b006c648fcdb268b8f7a2628dd4959d3b07ed536d4f9562b388ab69
- MD5 8e52faa602c5cc5337bbe9e7ac444e63
- SHA1 e07e318dde3cd633ee7c81456b283e8cc8abda86
- SHA512 7da0488aee97ce666857fe7859b962d002ec8a49bfb8be81a3e846f6aace44e983e325007bcc7683223f6933b9dc3adddd3e9bbb70b6a9915af08cec7301eb1c
- MD5 SHA1 SHA512