Analysis
- max time kernel
19s - max time network
158s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
12/07/2026, 00:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Mxslot168_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mxslot168_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Mxslot168_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Mxslot168_0.0.1.apk
- Size 5.4MB
- Sample260712-almprabv6l
- SHA256 d9dec83fbf736ca077c6e612138ea60fb41d784833eb4d0c054ebeb58e3275c6
- MD5 9fdb82d1accf7f136a80db54931a401a
- SHA1 3005b61f7f4604aab78429312354f2f1788cba3a
- SHA512 46d271e1e024b544bba264d3f38156ce3bb6e119a6bc8f1100f78311789f84671de163916568472c09a6881ad02639e619a8bce4a24b32afef0ef43c9e1792a6
- SSDEEP 98304:zpKjn/ydJmwj+YIj0ahRRSpppmlYhLFXilUBZKNdc9N4Xd7AcoTYrFA:zY6jVj+9waXRiimm+N4t7K
- TLSH T1CD46F1CBFBD8992FC87710B2C96E52B166574D028A83DF43AD44361C68772E41F99BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentMxslot168 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentMxslot168 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentMxslot168 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentMxslot168
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentMxslot168/files/profileInstalled
- Size 24B
- SHA256 65553eed43377ba8d6f54aae8efbe553114a0cdb8d53603b7a64fa6ba4799b64
- MD5 4cc815c0ec1d2c0b97aad0903fa8be26
- SHA1 f386f5b5559a4c7a899d7a756f66b29e4fce2435
- SHA512 8238a567b892e0996879f154b8dbea68a2eb7364f3423af5a65be961f99542d0386780ce4700e94506613a307c29af95dd9ad663e699d0ce550697fa1f0bfd11
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentMxslot168/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 40891fb7fc4d16ba6bd7064a991c250d49342279e2f76f4a53c0d3ba7661d33f
- MD5 ff04002e4e36bf4deee66f361863d07f
- SHA1 d70377ae28bfb6edea06ea6ce0c519c3c97f7d90
- SHA512 8fde6e0b0c37757bce27541ab3a8d7eef489c7eb8b3001651f012168b37b9e97ac382a24d278f563cd5b6b9c71417ef89b7e90e8403f381191195245b9285ea5
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentMxslot168/primary.prof
- Size 2KB
- SHA256 a00524123f0b0fe46eb30150878380f2874c3fe1408ee9592a212568e09521f7
- MD5 bf71cf33eeb661e707f2af05b5dd4b31
- SHA1 c0ca26960cafa6b98bc862d3fdd9bdbb1911abf9
- SHA512 d9eb3058160989c615986d6b9e04242e8cbf52917572093a6952fbac284facbb406f62d57fc16989cf518a58f3af159a4cd0f55e240fcf2c10dc965a41a59dc4
- TLSH T15C511A932B4CC958E7610BB1BE53413421C74F39CFA47456F6E7096B905D53B1822774
- MD5 SHA1 SHA512 TLSH