Analysis
- max time kernel
30s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
12/07/2026, 18:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Raja111_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Raja111_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Raja111_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Raja111_2_1_6.apk
- Size 4.3MB
- Sample260712-wwqeaaft3k
- SHA256 fd9cbaf75983bffedaf20a39d17dd3af27b0333059ff71f49b9f3b89ae5d16bc
- MD5 2d99c6b5502e1fc0f849d779ba023d76
- SHA1 fb5a0da46365ac8803bbf217a9c267a52536acd3
- SHA512 3c4ca7b9f6c671e596399fa5c5cba258828a1692944911f35a86b2f34fcbee5d616122f4907b55ac260e431320f08ac30b67ffb0c87b3e450ee0516da6776a0b
- SSDEEP 98304:MverDDbpwVVM6P+KA/tGrtNtb0qyReOPfNIbPctP/mrDTYR:C+DblhKAY9vMeOXNILcqD6
- TLSH T189261293F769AA2FCCB78032099A533122528E16C753E74B64583B6D3877BD80F897C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ozzo.Raja111 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ozzo.Raja111 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ozzo.Raja111 - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ozzo.Raja111 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ozzo.Raja111 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ozzo.Raja111
Processes
-
com.ozzo.Raja1111⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5158
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 1351bc79ff66f090cd6ac9833870e7762dc5bd3e255353358f82979d240b40f7
- MD5 1859756779ab1f3bd548a4d997070b60
- SHA1 b15e5c657d115266e362504316a720bde21c540e
- SHA512 bee6f62231ab48804c330c5cfab9109d1a6a5571a42f9ce17a998c1e1a3337a4e3bed1ed4acb19dd5db92e307db53f0f925997c6fb881a9054290666754bac5a
- MD5 SHA1 SHA512
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 3f875de7231b11556f921846674bfadf8b8bacf3800407647b3b17722edac025
- MD5 60b243e0dd9c5eaec3aa71c5581febe6
- SHA1 41beaf06ade86bf71f5df6270cea5572c9381ea8
- SHA512 c246a6c165c76673baa9843a619423500b6ead0facbac431fba288ad90bf7077db17211a57e386f06c10394b836327e6e0f59650fa92415e6e3366d9f4dd6beb
- SSDEEP 6:KAVnP/nQ29FZdrlOERX4PBX4ogLugMBX4suuK+/GnLsyNtVSyNtV4FYWOw2:KAVnQwzdTRmBEyPbP/GLsenDn4FYWOw2
- TLSH T1FC72C26493901B7ADA1D13725C89C3851D60EA388322C70F365208142C02788F590F0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 18318cb9b9133ade67799e6507de50a4f78f4691de60443508f03568ff8e1d31
- MD5 9e2de59face659659dbbdd07859d5002
- SHA1 f87be341d4ae55cdcb176337d7e2884de233f24f
- SHA512 15947abe55bb1d5d26d65fdb0eef2a542b0f6941f9761c06928c08700b165d6a7071768e6b059a17243c535772b3448415db6e496bd4b473eff1e9e966a094cf
- SSDEEP 96:ZQW0WeHDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:Zz03ndjnHt9S/f8JzSV+6D86T0ED
- TLSH T1F9B3218D0F692704C9AD64B0DDD00FA1797E813E9393E3E675920075EDC2921EE29DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ozzo.Raja111/no_backup/androidx.work.workdb-wal
- Size 120KB
- SHA256 02a5ce0983e5ab4f5ede044cbcd228325b489c746435aa49515a55b7e8f3eaa4
- MD5 4c6d76d9e72944b46d51c648b5a7357c
- SHA1 6927b5da07716b70d226e6696d77f429f1f6dbec
- SHA512 f96f98b7c1d290d5a33ceb65104dfd1d515a3176303e17e8f3f2e9b9b7fce124d01dabcf4c8980e87b055c7ea4d324f865d71e8718570e9503c490aca7fd7203
- SSDEEP 3:RSvNtVUlIAlkHwzXtRKVjWc4bN/KXBVec0XllgoqKXtRKVjWn:0VnUlx72V6bNCRVf0p2Vq
- TLSH T13DC392E316290526C9196B7CFE3F67880402D9524288AFBA688A19712A2469C9964204
- MD5 SHA1 SHA512 SSDEEP TLSH