Analysis

  • max time kernel
    17s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    13/07/2026, 06:14

General

  • Target
    channel.broker.decoder.apk
  • Size 12.0MB
  • Sample260713-gzsaqaev61
  • SHA256 d56920ef82f3932e3b716c07335d7866d4fe52309600edf5abfa2f6d2bd00e0b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • transcoder.expeditor.shuffler
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks the application is allowed to request package installs through the package installer
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5047

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/transcoder.expeditor.shuffler/files/profileInstalled
        • Size 24B
        • SHA256 d4325f6d431c3d9d15f2cc34982ab4fb87d8bf1e4164a59af37635a6a6529997
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/transcoder.expeditor.shuffler/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 bcd2a6afe8e6fe2e1458705e9404f7b8d18fe37037a67113595daf7f87a30389
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/transcoder.expeditor.shuffler/primary.prof
        • Size 90B
        • SHA256 4b97489bec60a30894afcf6839f7dc8621f457b595d0b4c1db1c60f172cae013
        • MD5 SHA1 SHA512 TLSH