Analysis
- max time kernel
149s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
21/07/2026, 02:07
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SubastasTampico_v1.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SubastasTampico_v1.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
SubastasTampico_v1.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target SubastasTampico_v1.apk
- Size 6.1MB
- Sample260721-ckbbfadx3x
- SHA256 9f7f43e5ce5851ff1d02e9eeb0f62c08a70eb4926c8795fc2a20bbc21b06f95d
- MD5 5a175dbdfeabbd474ec00dfa89cce8f1
- SHA1 75129dd51eab90347953b6bb5c10f2c91c60e036
- SHA512 8258e77d63a7e619bcac1e83072d3dffc69bbda75df4227acda4c907e045ac6f91602ae0d3fcb97aa0360027f1087f81940e181dc37b761117c4c099d011dfc9
- SSDEEP 196608:z5zXzRwKqvJGtDt0s3/Snz07VOve6voqqcttaRk:tzXzRdqvJUA07V3Ooqqcttai
- TLSH T14156F18AF7685E2FC8775432097A5235964B4D168E839B83694C371C38BB6E40F4EBCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.subastastampico4 - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.example.subastastampico4 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.subastastampico4 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.subastastampico4 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.subastastampico4 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.subastastampico4 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.subastastampico4
Processes
-
com.example.subastastampico41⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5093
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.subastastampico4/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 67243f868927f0c0aae81e093090085aed92490ed3eb831464e5151dff04df33
- MD5 fe3709c918329a0aa3a21b3aaeb19789
- SHA1 fce8cbe9c96f13de82de7af6ef12adab2000235c
- SHA512 e3c80f53bb98d9c9e6e3e6452f04b905319952b2b0b49695293ad1bfd87a0132845805900d36de4b46784017eda7dd6052f3c07fffc8c7557e127d464dfe9c9d
- SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS4:8MEX0wIyNja4
- TLSH T12443619D1E2C2221C57E283ED7E243635B7C93DF572392623AE08CF98DC206974359A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.subastastampico4/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 fc513eebaaa2878e708a4294d043b027c90387496566681f42e77abfd63298fc
- MD5 78c2e6ecef1f7bb865b2e71a1ebf3e63
- SHA1 c0d1d0a0a9f4ade4cd04067354507d69a7164f29
- SHA512 7c1e8316e08a99ddb3a300c24a41ae51a0541a0c8518fec71df5d9c7f5a98fe1d729d6ff43b4bcc2ce047aaef13ba9e1741f95d5cf3fb3c5fe3a0ce5e681c699
- MD5 SHA1 SHA512
- Path /data/data/com.example.subastastampico4/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 c0fcbb0fc5690163e8e932ed5cbd47208bdbf6974801e49ca380dc22eae52999
- MD5 3857e98e6a61df8f235367b848dc24d0
- SHA1 0285fe25e98b9008d6a063dcbba2fd78f9a6c25a
- SHA512 3a6845ae057538ca07a7e6b689dd5d241769b3054c8e61629f703e253ecca346dfafd183ed86210dab6d58b794773fbb4688958f4bc5b7a2ce475d35f78b8c29
- SSDEEP 6:7+/l9t4n1xg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKob:7+tDYqLiuWdwRmBEyPb5
- TLSH T184022299A3C12823C92936F7A0D883800D00E799C171CB87256108987D434CCA8E0E04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.subastastampico4/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 3746c643e7d8c0ba3237f231acf754471f61f25f455e40c75ea98d60fee929d7
- MD5 5f90d3b83458ceb15f2dac3a9c2f6cb2
- SHA1 84a3b39a7ef6d324c62f5f65b1a2656d38cc4652
- SHA512 c7ee090069bf462b5e475612bd3375b96cbc0d7b66d187f47f38cdd9382c602dee936b4afa2fc9f44fe403e6e24495b8244e10e353749796c5e9d7e09319da7f
- SSDEEP 6:7+/l9egPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKLNM/y:7+t44qLJdTRmBEyPb2Nsy
- TLSH T11E02228963C21A13E01A27BBE0C883412EA2A7148233CB075A6008983C02ADCA890E00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.subastastampico4/files/PersistedInstallation3210818312869453964tmp
- Size 567B
- SHA256 a6828705098add0f4aa6bb9a49a7bdd292214547140e9215405f4443cbf5eef9
- MD5 bc7956401d39bce9ab65717b868a5498
- SHA1 3cd3c0407334bea1cc92d5caeeb101c35286bb1c
- SHA512 88aa035c5998d1a3f7fe8d860d3b7f3986d4bffd332f2f13d1c5dca17b73be653ac322b866e1a3e9f15e5fab2164bd3aa5659e2b8ce6716ab7757c52a971a8ad
- TLSH T1A0F0EB44F2F1864FE4A76212A8DE7E848D210BC9180E44F8BFCCC8F8D568D3A7247969
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.subastastampico4/files/PersistedInstallation6324693233711653863tmp
- Size 90B
- SHA256 80d78a088f781b11abd6d5fb2abc41dd2d5de8bc7dc2bb7cce7286e9d91e9d9e
- MD5 8014e66a0b279e4ec58f59c051b267fc
- SHA1 48672c97084b57d17d6dd0f2509dd34486cd953e
- SHA512 3d6f15d045f4a153d1a95d5274c6fcdb81a1a5b458b276aca6e1e21c64b60c3957068282600b98a66416186c69e6d880e0119270776823c8ac330851d642474a
- TLSH T1F0B012008A304266849AB2077CCC91001EA116C1280D8F481B0CF05040C11D981579B4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.subastastampico4/files/profileInstalled
- Size 24B
- SHA256 7e2706840da3d0eba0fd23e81160d37fd7a27a8b401d4282ca1aa2508f43a134
- MD5 bd8cd46a95fd0c0a8e62bd04d3d84a10
- SHA1 762b9dd9dab49c3ac38a94558d3abf0c16e3e6c8
- SHA512 13cf5ec209bffca57c5599fe661798d334d186cf83c37f8bd9419e7f62992e13f7576c350eeaa2a13d55f305df2e419be9a76b2c993b36d81cee2b3811a49b84
- MD5 SHA1 SHA512
- Path /data/data/com.example.subastastampico4/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b96b0669cbef7302be88fb456da0bb067e3ad89765bbbac56c000351669fdbb1
- MD5 8dcd5b8df7d417bc80806ba094cbac0d
- SHA1 696e871e8d106b4327d02c7c5d60870e4436d857
- SHA512 eb4c28a2722afe7a09bbdf6c4fe2007fca1fc3f15eba29bbb96afd05117c7a824b35d61014e17ed17c2d50f30546a6264b0b51f0319307181826ac96de376825
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.subastastampico4/primary.prof
- Size 2KB
- SHA256 fbd031d22ea3826d6cfed58cefa120f1f341f1dd3cb62169de34b617a8f704dd
- MD5 41d33cb5e0495c28fc6fb0d08c730dfa
- SHA1 277f02f36298de0a1f101b458b3efd654968337d
- SHA512 e3ada0e70bc53463ff2189f661cb21638dcc3a6756e0174f7ab318b3faed8b6b32ad45a78f515f07b58e009884ff8c79fcf5ef3813fb7e9345d861e0ff374861
- TLSH T1B9514CBEF04B43ACBE8BC898C3C5129D949E8775612BD4DE0B48322A143DC4571EE5C5
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.example.subastastampico4/primary.prof
- Size 5KB
- SHA256 2d2f22a7a673566879399b144981dfd2f9fe02d64e5a94d611288a81a5c8a9b2
- MD5 3d5166acef0b3f54d8b65685d6d9dabd
- SHA1 f47eeb1306cca0073e1d0c168e193050eff919d1
- SHA512 fb833c25a6efa03a806c62071e01422a4af16ceed9213f84cf017e8f6afe90161c74d162871cb65bcfede1bce019e9e499c041790c42712f3d45cde1195314e2
- SSDEEP 96:cNAH7SzoiE9hlZ9d+cBHTnU+gp6D+FAx+3jmVEkcDiMtIH8DPW7WIWlFuCS3:7HmzdE9hlZOcxTnUzp6MZ6i5IH8z8W7i
- TLSH T1F4C17FC9E41D5FE60C277C6D2F809C289F61854B4368CEC29071355B7EDAE63905A27D
- MD5 SHA1 SHA512 SSDEEP TLSH