Resubmissions

20/07/2026, 15:20

260720-sq5egags4y7

20/07/2026, 15:07

260720-shpn2sd14j7

General

  • Target
    HanFlow-PDF-Android.apk
  • Size 8.2MB
  • Sample260720-shpn2sd14j
  • SHA256 39e6a5f6ae47a2cdb4d5905ee441d08dad4efc88f2a6e3f360cc0b8ee309caa8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      HanFlow-PDF-Android.apk
    • Size 8.2MB
    • SHA256 39e6a5f6ae47a2cdb4d5905ee441d08dad4efc88f2a6e3f360cc0b8ee309caa8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v16

Tasks