2c7270e898c5c0e61bf50d9335a547c1e2b408f6ed1c07bff9d669ed245841f6

Analysis

max time kernel
123s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
24/07/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
indiaflagl_udq6zt6s.apk
Size 758KB
Sample260724-pg9faazdkf
SHA256 2c7270e898c5c0e61bf50d9335a547c1e2b408f6ed1c07bff9d669ed245841f6
MD5 fbeb2af5614d01955a78d107c9c8b6f2
SHA1 9f9400e41618d044eb41a7bc24b722dfbe357bd1
SHA512 d68bf3bc9449bea61668a5984e4ac85c3f01f1423fc843d4038814f7dd58f90c79e83f31311b4cf0c6c07e8c10ccd4ee953ce3366a9fc2fb4b9fa9ea9b18601f
SSDEEP 12288:KqSPjoNn/NKN5s2vCOjmp8T+qSnqSm1RDGFuqA9jsLZ4y4nNyh3R0V9ld0/x7i:K7P6nYg+07n7CDGAqRSy0aP/xu
TLSH
T13DF42304F7593857F13D5B74CEA157436A8D2432465AEA0B60F0D0592AEFBA6CF00FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/xbin/su	com.wickedfreeapps.indiaflagg
/system/sd/xbin/su	com.wickedfreeapps.indiaflagg
/data/local/su	com.wickedfreeapps.indiaflagg
/system/bin/su	com.wickedfreeapps.indiaflagg
/data/local/bin/su	com.wickedfreeapps.indiaflagg
/system/bin/failsafe/su	com.wickedfreeapps.indiaflagg
/sbin/su	com.wickedfreeapps.indiaflagg
/system/xbin/su	com.wickedfreeapps.indiaflagg

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.wickedfreeapps.indiaflagg

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wickedfreeapps.indiaflagg

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wickedfreeapps.indiaflagg

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.wickedfreeapps.indiaflagg

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.wickedfreeapps.indiaflagg

com.wickedfreeapps.indiaflagg
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4908

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

tapcontext

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext
Size 28KB
SHA256 0be0d785f14286134082dd4a03fefea2ebd773720bf61f3efd4b439f81abe7c9
MD5 3ebd5426ebdcd88bb5acb9eca20fba37
SHA1 b630be0325b53bafe7a5fd0ec430fefdd929b498
SHA512 14c3fe6ee4c1c097afa8e1381ebb69ebf0da2ea3c6f5288d0978399a92fc096aae5df2f609fb16696507f7055b6d7068a53f03079e7d3a8ba6a2bd667b7ee7b1
SSDEEP 12:TLTN89qWFNKQU99wzbhRJTSFbyjLH9wzbhRZfRmBEyPbGtOwGQ:TLTNWqWFU5+JNR+Z0GSiGQ
TLSH
T1F8D2995FA7513601C08D15B76CE252939EF4626EB65386D33AF11C24CD82594A872DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tapcontext

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext
Size 28KB
SHA256 273c05668620eeec5f75dd9ee5909604f079d612bc1e306900eea305d7858f77
MD5 4b7937c7a5b77866c1471a9f55d3bc00
SHA1 6044b9a3724600d642decc83c7f3f26cd634ade1
SHA512 18679507c3fac323b0962077dbe931ce6b180d55444eeccda56081f5ef2bda79a9bccfa80a31f907fe65c7b72865f5f8c389b8e1553de48b2b89069fb4909e0e
SSDEEP 24:TLEPoWqWFU5+JNR+Z0GSP//CBP/dVhkoRbpW19q9YhRjkKWH9kGWYXQoIF:ToPob5gzuSP//w1rkC9YhRXWH9kGbRIF
TLSH
T184D2741FE750783BE24C19BB7CD30A83AFF81239B103554638E368149D452A770324BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tapcontext-journal

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
Size 512B
SHA256 66a7325ad43a06c406518a542093fc6c891e6b23acf5030702da8600cfeea9c2
MD5 84fd313dcabbd02e924845be9ec37612
SHA1 9a138657e3341ab6f32631721aeac02321763897
SHA512 d6633d4fe41645958c707f9ab74b72fc8a852de4a4a34780dde9eff39de2ab548b3737e1a9a92b2a90006994d431957d0827dc5f0d996c3cb3ec6d8b38cf10d2
MD5 SHA1 SHA512

Submit Download

tapcontext-journal

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
Size 8KB
SHA256 7c220ecbe3d75cab81dc55401a16b6af4996d73539a502342553f36c661cb081
MD5 640f9761b7a0a7f1d0fb246a35d17dda
SHA1 4e47fe8d4eefafc5ccabe3fd858d64ee12ccebb0
SHA512 41bebd635f5baffed24e70ce15a8c0d136ae4689def422cc8ccbdcf8a761df71798f0fe0cc6606b5c4e198c9466dcdfe3fc0780d6f3b35794db78b4e724de72a
SSDEEP 6:7+/l9LHn1h2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKYt0:7+thKqLiuWdYRmBEyPbbt0
TLSH
T16902C0ECA3800A13CD2D16B790D883C01D10E72A8271CF5716E108943C074CCF4A0DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tapcontext-journal

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
Size 8KB
SHA256 f55810170e148f514c1f7f7b67b6fae65d01f193776ef20184f6eb8e25c346a5
MD5 ce38a8c2b1bd7fbd21fca22a51bb2907
SHA1 fa75c50706c10c0b98a6c76abe4a2498204fb484
SHA512 7dac8c61de09dc2028f4c376da8dedcce4cf3f64e97acf8c7db9285283d8dd74f3fc9d96698c8ed0a82fff0a533f3536743029807367c7c39a7edaff6d985740
SSDEEP 6:7+/l9higPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6mtM/In:7+tO4qLJdeWRmBEyPbLisI
TLSH
T1F002228A63840843C03ED77BA0C883401E20AB28A363CB87169108D42C0A6CCA8B0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tapcontext-journal

Path /data/user/0/com.wickedfreeapps.indiaflagg/databases/tapcontext-journal
Size 16KB
SHA256 7420f6675e44c7c0c8aa4e1f2b96b8cdac7db19b96359819b3f4194d9ee463dd
MD5 2aaa4ad01c1a55fbd7b77c15b37d83f4
SHA1 edd8bc7e11c661457d8768883cb5ca6337bcbc69
SHA512 e4c66b9cbac2774e1099cc390278eb57aed8b43fe37ea8d13cb6859a597c4efe7e8e3782fbb6145841d68814990a6d089c16bb80ec45683fca092456da519f79
SSDEEP 12:7+t7PSqLTN89qWFNKQU99wzbhRJTSFbyjLH9wzbhRZfRmBEyPbn:7+tTSqLTNWqWFU5+JNR+Z0GSn
TLSH
T158729E5FA7527602C08D25B7ACF351539DB412AAF66385D13BF11C29CD425946072DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eula.zip

Path /data/user/0/com.wickedfreeapps.indiaflagg/files/eula.zip
Size 14KB
SHA256 73915b2f06df099d29b83dcf60d6e815235b2dc2704c5f9ff365325be341fa2e
MD5 a96f59c1635e65e5378798a8ba2c0d73
SHA1 26f8170a326f348593591864f9c3efce259981b8
SHA512 eb0c2b7f4fa6d7af113b893c4115aae285e99a7a5cad2c66cc8f4a426888a1d6faae88177d3fa5755253c92e774f56e4c01e69003ee9381941634d4b6a6f6422
SSDEEP 384:jCqQx5KalE4PJYaluigQ6KsYfMoSeCNOvGztoeP5heu/G2Csa/ou:jCVHC4x+d9YfzmOvDeP5kuQsagu
TLSH
T13B62D19431652BB7EE649C282E4714F4F843F7D21E0E289947F845BD278F2AF916026C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offline_startapp_eula_body.html

Path /data/user/0/com.wickedfreeapps.indiaflagg/files/offline_startapp_eula_body.html
Size 22KB
SHA256 08bb708178046d352f85434f39421674603b6f3069d006487c2f0261fff04540
MD5 28684f6069fb4ec76a3e54c8e2307ac7
SHA1 6ecbd36ffe5cf6e77ed57ebf3579412f1581081d
SHA512 3786c62f2892994e8ccaeca084f97b73bb3279fec62846d7bcbe176a18abc52e120b13aa2f34e7a6292b2ae7fd3ebe62e68a5054fbccd4e21d073237418e6876
SSDEEP 384:SpJSAy4u/DgrhOIIpyq+eP3Zid5//Db1sE/D9yvtMJ45/TUiA:SpnMpyqpP3Zib1sayvhx1A
TLSH
T1BEA20A25E2463949B036C4F49522AA09FF38414FC7832ACDF96D7BEB6F725D0842B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offline_startapp_eula_footer.html

Path /data/user/0/com.wickedfreeapps.indiaflagg/files/offline_startapp_eula_footer.html
Size 13KB
SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
MD5 9818dabc2eb86d5f4f071e9d67334570
SHA1 117e7978c9293d86ea5492b90a4999cc24225dbb
SHA512 79937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0
SSDEEP 192:SIC1VPawVyCxZ7/YDLFn+D2yi0+DZQuDSeDOIDEFpS4V4GDjFu0QE69HqKS1cBIZ:SIiVxSAykfVBDjFaW18IZ
TLSH
T13F527564E2053856B137D1B4A726A508FF38404FC6832ACDF9ADBFE56F31594847BAE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.bugsense

Path /storage/emulated/0/.bugsense
Size 33B
SHA256 fcee364ec518263472d93d23e4bd3f2562413a3ad5aedebfc79290edc62f27fa
MD5 e6b021dd09a97656e48ebf14f9065caf
SHA1 5de988ae58c6e5e0250ee1ab72e30effacb31eb3
SHA512 4e51e6cb87cbf9d9b75978df9e43247ffbe072b8eab93979fcdad8fde45163a4ed7431f305637aca7e6b4c496a2282632ade3987e163a84ab59554c6d18caf13
MD5 SHA1 SHA512

Submit Download

.tapcontext

Path /storage/emulated/0/.tapcontext
Size 20B
SHA256 cd842a10ce6f9f092368b978704512b5ab81a576f2bd129c7123da9f676216b6
MD5 43b8178d07625ecd992fe743620d4499
SHA1 ab319433e59a4df80f630c22b1286d2cef660277
SHA512 da8e5caf9ff74dd0742066245af09f1b8af4834bbc458873e0c8f32c24bcc3dd3705b7ffa4f53fd9116b0861c2dfef491f2c44b35e52354025370fd94e0eb386
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads