Analysis
- max time kernel
145s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
18/07/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1024.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1024.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
1024.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 1024.apk
- Size 1.7MB
- Sample260718-pgp2msbt4m
- SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
- MD5 86e3a5f53a63adb57ac737ed0c72fd1f
- SHA1 26cb72ca0d43f4e59b20636d1fc9f78457c005d6
- SHA512 184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
- SSDEEP 49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
- TLSH T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bt1024ab - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bt1024ab - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bt1024ab/files/profileInstalled
- Size 24B
- SHA256 b36f61e611a55c99f2b40fb227ba93d45a25536c8ac1465d04ffe936ffa5b32f
- MD5 696025e64966b559f0eda95d88517f60
- SHA1 f7c8525abe10c5a73e4d535ff34657e6e98ce6b6
- SHA512 d277649cb6d7fbc4ca664a813cdd204f5c1d7229f52537e184a623fde30e01fc841156e664ee3d16e8aeb2da77c1cf3114d1b7ae3ceb0d7859ead8789f4ac5d2
- MD5 SHA1 SHA512
- Path /data/data/com.bt1024ab/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 dbd5b70e5561fd0638b3f29839211b0f96bb5e6ec9458e9de297b3abff8742ff
- MD5 cf3ad6789b88169f1b8b17d84eee2d76
- SHA1 1e6084d0826e8a1d74d11031225a0e9aceb5b1b2
- SHA512 2e3db6bed1d32671849513b09b06207d934356c9ec37d085d6e63b9c2d87bf808b163cb9984ed177a1436abea2f68c53e4c5e3e079c89a65ae5e63392bb6fdbc
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bt1024ab/primary.prof
- Size 1KB
- SHA256 c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
- MD5 2a47fd140c1c9b76dfc3bcfca3767773
- SHA1 3f9e771a838941b23479bd1abdde85c06ccb5ddf
- SHA512 d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5
- TLSH T12121D63B055E85FFF180DC37B0195F6C4AB292884E98413840965B991B06470F11AACE
- MD5 SHA1 SHA512 TLSH