Analysis
- max time kernel
101s - max time network
155s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
18/07/2026, 00:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Megasensa_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Megasensa_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Megasensa_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Megasensa_2_1_6.apk
- Size 4.3MB
- Sample260718-albbqaas2n
- SHA256 3db0d58b6007f9648764ba3bde97acfaee0d864d875fca5881914edc0630efcf
- MD5 449ae035701710106436f142d484115b
- SHA1 1fbc748151450f546193897cf0751ce772f08b59
- SHA512 d8dd891ae7d4bda2065e59c5af2a3c222e016e819bfeebab4beca8e204f06ef4e5a70715a8b12927aa54d249aa32c5f9dbfe025c0b01c29bb5733de7c68d5130
- SSDEEP 98304:5/gmhlIKY6UBqkoiCLIf4kKEJZ8Tv/V8W8uplghvbPcroo/m9DTyt:lgmhth3kcrEJZ8TvtfjivLcreDA
- TLSH T1D5261282F769AA2FCCB781321A9A433152429E26CB53E7076468377C787BBD40F953D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ozzo.MegaSensa - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.ozzo.MegaSensa - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ozzo.MegaSensa - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ozzo.MegaSensa
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ozzo.MegaSensa/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ozzo.MegaSensa/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 9774aa5ddc8500fc9629898254960f7b184b0677789c2c9e86c3b1fcc3a46030
- MD5 c44b7c0c12e1e88de296614bec3d01c4
- SHA1 d5f5151ae9a121010df3b22ce3cf35b61ceaa5c6
- SHA512 71f17c65a7511bf149f15dcc502ce3ca58063b83f5265ecc888f9b9f97af7535d44d3ea6e8770e372265872ef94790c898d4d705066fdb0a476050f46f7210f0
- MD5 SHA1 SHA512
- Path /data/data/com.ozzo.MegaSensa/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ozzo.MegaSensa/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 0c402d599db9ae473e627e99559ed6171b735f612ce9b96b2a9b7915c9704f17
- MD5 bb8f3716a654427d23dbef64c1c406f4
- SHA1 4240ff89f17a28d1299c53c173562ef063c23edc
- SHA512 c243ebf36278819134711bcc59f5fab921fdfbc03321defdffcbaa5ce0fca06a3a1e26bca8acf2a75f6c1f10e31544774cdfe1435d6e6879990639b8e98ffa40
- SSDEEP 6:KB//L99FZde/kPlOERX4PBX4ogLugMBX4suuK+/+0rUvTv4iOw2:KJLrzdeWRmBEyPbP/dr/iOw2
- TLSH T18B722B94D74116D3D91E437660D5C3400F61D319A766C78BE3522530EC423CC9CA0D0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ozzo.MegaSensa/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 91ab094231ef6079ab1164b32cd0beb63f65a66b0f42ae820d1d8478c520f5ca
- MD5 4b8cf11f329ee5d5703d38937a7a0c5f
- SHA1 6152452f6ade826d1014702403e88208811b5d33
- SHA512 ec63d5a184bca6759a4d817855791cefd5e0e2428480d89035f243618bf64bb5800acd7e68bd2fafd0be3d6485a917836f121df5c1769a0f5566c8c4fa88189e
- SSDEEP 96:KYZsWbDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:Js+ndjnHt9S/f8JzSV+6D86T0ED
- TLSH T1E5B3118E0F592640C0ADA4F0A5D00FE1793E812E9393E3D3E6915075EDD2A25DD29CFE
- MD5 SHA1 SHA512 SSDEEP TLSH