Analysis
- max time kernel
17s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/07/2026, 12:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1024.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1024.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
1024.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 1024.apk
- Size 1.7MB
- Sample260719-pf91esdv2x
- SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
- MD5 86e3a5f53a63adb57ac737ed0c72fd1f
- SHA1 26cb72ca0d43f4e59b20636d1fc9f78457c005d6
- SHA512 184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
- SSDEEP 49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
- TLSH T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bt1024ab - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bt1024ab - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bt1024ab/files/profileInstalled
- Size 24B
- SHA256 0fe6be027e60c1ba2cdfa01d0b86cb16144d5c4ebf9bfa390b230c3ba72e491a
- MD5 f7a0c37bc2697280eff78564d996609f
- SHA1 9ec1d093ab7bba3373792deb426007006aee2012
- SHA512 612fbd52d47f0e3805b5ecba5fce9bf874656d49981af558548a3f95b576912f1fa350ae521410e8b3b76a36a6ddefae5051ce09e34fa67715f4ae0258464749
- MD5 SHA1 SHA512
- Path /data/data/com.bt1024ab/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f0ad5b34d55c8069f96f84a5cf9cb01e6ce86f1d0c3f789d3a00d82886dfada9
- MD5 d3a818564ae8b7f8493407861bbcc7fa
- SHA1 ed35ecf18a11def0e331fc43d89f5c9a2a27e797
- SHA512 52db19b76ac6b043abcce25adacaeae58fff77bd18c76f40bc9956db6cabe9d77a98afc7f186db0c320c8adf0b798448993479d1a77ff2e60d29dbaffdafd8c2
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bt1024ab/primary.prof
- Size 1KB
- SHA256 c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
- MD5 2a47fd140c1c9b76dfc3bcfca3767773
- SHA1 3f9e771a838941b23479bd1abdde85c06ccb5ddf
- SHA512 d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5
- TLSH T12121D63B055E85FFF180DC37B0195F6C4AB292884E98413840965B991B06470F11AACE
- MD5 SHA1 SHA512 TLSH