Analysis
- max time kernel
47s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
11/07/2026, 12:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
gmbuy.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gmbuy.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
gmbuy.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target gmbuy.apk
- Size 5.7MB
- Sample260711-pd66rabx81
- SHA256 c9108fe5862f9006e9f79977c58a89ac7daf8c2bd02b0b92fc4a6652ce9acd31
- MD5 8fd410fbf4448d8e891b2c4216bb5af5
- SHA1 532175e59bbff58481b2f389d2793aec214991c3
- SHA512 dbd22bbf5ca88735e5e9c42da33b72271fc998b9d45fa0af74bdd12833118766147d08d5c424e7bb18fe883be637d58d12ed751f089c3c06dd6c21e7a8844249
- SSDEEP 98304:WG47ccUTpnCm6YF9W5PIlwi8bvJxIj5Ytl0D2Qar3OSCN0Kc8GcxVN0oTwrU4GC:74QPkHYnW5PDi8zJIel0dk3LC1c85XCl
- TLSH T18E56F1C6F7D8992FC8375072C9BE52B151874C168A839F836D58720C69BB9D41F8AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.gmbuy.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.gmbuy.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.gmbuy.app