Analysis

  • max time kernel
    122s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    24/07/2026, 12:19

General

  • Target
    indiaflagl_udq6zt6s.apk
  • Size 758KB
  • Sample260724-pg9faazdkf
  • SHA256 2c7270e898c5c0e61bf50d9335a547c1e2b408f6ed1c07bff9d669ed245841f6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.wickedfreeapps.indiaflagg
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5020

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tapcontext

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext
        • Size 28KB
        • SHA256 a2392c518dcb8e1fcf487050bdf26b3011311dbd751bbb5aae25f980a75e4b92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tapcontext

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext
        • Size 28KB
        • SHA256 c27f9e959c0f1e1aa1525ad7e6cd4e46c362f53b22ce6786359be93447d2bd09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tapcontext-journal

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
        • Size 512B
        • SHA256 fb008d7c3116705080db0aeb34c12dd96378399a04097b52d5c3deb6a395e91d
        • MD5 SHA1 SHA512

        tapcontext-journal

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
        • Size 8KB
        • SHA256 83c5097ce41da3b71c77572eb5ff6b1080095eab2cb88bc798d8e2dcc3038ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tapcontext-journal

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
        • Size 8KB
        • SHA256 442fc76efeb7ee477a01099defe08dfdcce17d1a9e0e898f68117ea7a8c1446e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tapcontext-journal

        • Path /data/data/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
        • Size 16KB
        • SHA256 938ed1eeca839c9b8e62b55d0e404e6454aa9c039751702f95c5a2f5f8c6e97e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eula.zip

        • Path /data/data/com.wickedfreeapps.indiaflagg/files/eula.zip
        • Size 14KB
        • SHA256 73915b2f06df099d29b83dcf60d6e815235b2dc2704c5f9ff365325be341fa2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offline_startapp_eula_body.html

        • Path /data/data/com.wickedfreeapps.indiaflagg/files/offline_startapp_eula_body.html
        • Size 22KB
        • SHA256 08bb708178046d352f85434f39421674603b6f3069d006487c2f0261fff04540
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offline_startapp_eula_footer.html

        • Path /data/data/com.wickedfreeapps.indiaflagg/files/offline_startapp_eula_footer.html
        • Size 13KB
        • SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .bugsense

        • Path /storage/emulated/0/.bugsense
        • Size 33B
        • SHA256 bd7e08facb0b976f9df9657b2d576f7276657fbe60593dcd2063a16ad86cd074
        • MD5 SHA1 SHA512

        .tapcontext

        • Path /storage/emulated/0/.tapcontext
        • Size 20B
        • SHA256 cd842a10ce6f9f092368b978704512b5ab81a576f2bd129c7123da9f676216b6
        • MD5 SHA1 SHA512