Analysis
- max time kernel
22s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
24/07/2026, 12:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1024.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1024.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
1024.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target 1024.apk
- Size 1.7MB
- Sample260724-phm9fazdmf
- SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
- MD5 86e3a5f53a63adb57ac737ed0c72fd1f
- SHA1 26cb72ca0d43f4e59b20636d1fc9f78457c005d6
- SHA512 184ed3e1bbd8dc73fb9a44e6663ae0d4aa4c4d50d0599d782bc008354487910f5047e906c9e93bc48cfe15b5578ff557b39dfb8a9ef3987ef5c50cd3538b6b29
- SSDEEP 49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
- TLSH T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.bt1024ab - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.bt1024ab - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.bt1024ab - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.bt1024ab
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bt1024ab/files/profileInstalled
- Size 24B
- SHA256 fbcfea7cae032c722a2e1a97a9c1a9688a9169161fbcedd55ab3dc17a88ded8b
- MD5 5ac404e630312e149ab00303bec1eada
- SHA1 f47ae9ccbd2f6637bb1e3be16682e7f0c99c4414
- SHA512 1e0688857802496df8dcfe39914ffe2346e9a50933119769de27e7bf3abbd08a6a339d0a7912c5fc0a90201ca8f86da0472e6deed2abcfbe75c8b34882af5928
- MD5 SHA1 SHA512
- Path /data/data/com.bt1024ab/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 7274b9ab81e8176abeb5c998c74a039ec5e814597d5d267a0e761efe09dfad4b
- MD5 736ca79f0e9f2edbd883b678d23f6b2a
- SHA1 c5bbb6b1488574840e17eb5a86008a19543da611
- SHA512 4c6bf4f232ee10ecaa60256088bf707545e686624e497ea8fa00af6733879b0ce3eb65fbed90800666a73b9436473fedf17048e344b18d743bd04b564c522a82
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bt1024ab/primary.prof
- Size 1KB
- SHA256 c3a46df3f89acadf1ea5192d63a6be93efc22caf7b30d288d767ba907737dc88
- MD5 2a47fd140c1c9b76dfc3bcfca3767773
- SHA1 3f9e771a838941b23479bd1abdde85c06ccb5ddf
- SHA512 d42c27f2a700adc3993afc36be9960afd1aa160fd7d0a2422c136f248b3ceb2debaff07d875e0f497a9cc2aff6e75d4c3f722685dcdb2b863943fa2e5bc51cc5
- TLSH T12121D63B055E85FFF180DC37B0195F6C4AB292884E98413840965B991B06470F11AACE
- MD5 SHA1 SHA512 TLSH