Analysis
- max time kernel
16s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
18/07/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1024.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1024.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
1024.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 1024.apk
- Size 1.7MB
- Sample260718-pgp2msew3x
- SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
- MD5 86e3a5f53a63adb57ac737ed0c72fd1f
- SHA1 26cb72ca0d43f4e59b20636d1fc9f78457c005d6
- SHA512 184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
- SSDEEP 49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
- TLSH T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bt1024ab - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bt1024ab - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bt1024ab/files/profileInstalled
- Size 24B
- SHA256 09ac12207d19d56631cf104b65244452cb5efed2b9f6828e9e0800d10d2a5c98
- MD5 ef8f8c4f4c2e7afbc1612a90fb86faf8
- SHA1 21bb644c2837925ab3c31f8b53993286a38e773a
- SHA512 a3e82617648a7f82fd96469a50ff1bac021235f261c5f40f44f0938a5e103ee8654185a369ae96fa9fd11447b6edcabfad172a0e6a92f1b3e6d7fd74e08db4ab
- MD5 SHA1 SHA512
- Path /data/data/com.bt1024ab/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 351066513b4c084c35bd5a1e4be2147c8da640162b381b7e9c5295085ff306eb
- MD5 21a6cd64e73b3150985c838b73d97bbb
- SHA1 fa7d1f1868fc1914bf0dd01aa8c0bbcd06cbecb5
- SHA512 80b706de906a95c47948a41994e8643ae086741f817d7be08003b1be307c6730c679842db616dc3756933d0dc71f989faad6d6bc30f2a6c0fbba09b8961a0348
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bt1024ab/primary.prof
- Size 1KB
- SHA256 c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
- MD5 2a47fd140c1c9b76dfc3bcfca3767773
- SHA1 3f9e771a838941b23479bd1abdde85c06ccb5ddf
- SHA512 d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5
- TLSH T12121D63B055E85FFF180DC37B0195F6C4AB292884E98413840965B991B06470F11AACE
- MD5 SHA1 SHA512 TLSH