Analysis
- max time kernel
145s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/07/2026, 06:23
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1024.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1024.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
1024.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 1024.apk
- Size 1.7MB
- Sample260723-g5j7aser21
- SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
- MD5 86e3a5f53a63adb57ac737ed0c72fd1f
- SHA1 26cb72ca0d43f4e59b20636d1fc9f78457c005d6
- SHA512 184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
- SSDEEP 49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
- TLSH T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bt1024ab - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bt1024ab - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bt1024ab/files/profileInstalled
- Size 24B
- SHA256 17c1067a42963a8c1c463b9513fca77ad65cdb3f1c743d33388144a58f46388c
- MD5 3d21f701adbcf6477625a8b4f6303b89
- SHA1 304ed11d6dc32c2391dd59699bd39296680572ea
- SHA512 4a69d58495d099dcd28b33ba4a7897de8d433dcba751b6ca1cea9de8380500790bf59d21a8bfbfd266f8339a2424bfb533c19136f8b79730a3ae76a2d72b6647
- MD5 SHA1 SHA512
- Path /data/data/com.bt1024ab/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 65f895df22663e57ad84abb18242f5eb2df67fe4509f771814da9835280d16ee
- MD5 ee47ef8a9b196a3b3e911d685ce3d661
- SHA1 1cb85d1fc3c4caa400268a88b7e5f5326633f76a
- SHA512 b4e6acae9362bd26f35d6332736e25cb075fb949448c79b93d9235689214023e87b2f434bc4af331786a34e62ff5b204d8131c8924aa892972549a5986fba5b8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bt1024ab/primary.prof
- Size 1KB
- SHA256 c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
- MD5 2a47fd140c1c9b76dfc3bcfca3767773
- SHA1 3f9e771a838941b23479bd1abdde85c06ccb5ddf
- SHA512 d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5
- TLSH T12121D63B055E85FFF180DC37B0195F6C4AB292884E98413840965B991B06470F11AACE
- MD5 SHA1 SHA512 TLSH