Resubmissions
24/07/2026, 19:45
260724-ygds2s1hkd724/07/2026, 19:08
260724-xs7ptsbl21724/07/2026, 19:06
260724-xr3dqabk9w7Analysis
- max time kernel
25s - max time network
40s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
24/07/2026, 19:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
KK.apk
Resource
android-33-x64-arm64-20260708-en
3 signatures
60 seconds
Behavioral task
behavioral2
Sample
KK.apk
Resource
android-x64-20260325-en
5 signatures
60 seconds
Behavioral task
behavioral3
Sample
KK.apk
Resource
android-x64-arm64-20260325-en
3 signatures
60 seconds
Behavioral task
behavioral4
Sample
KK.apk
Resource
android-34-x64-arm64-20260325.1-en
4 signatures
60 seconds
Behavioral task
behavioral5
Sample
KK.apk
Resource
android-35-x64-arm64-20260325-en
3 signatures
60 seconds
Behavioral task
behavioral6
Sample
KK.apk
Resource
android-x86-arm-20260325-en
4 signatures
60 seconds
General
- Target KK.apk
- Size 6.7MB
- Sample260724-xs7ptsbl21
- SHA256 35abc0a2399c0d01149afefd78d6ca348fadae128ede9dc76a6b179cad5a3480
- MD5 3415e0b9068c091579c0c4f09152071b
- SHA1 be819a7b9ec1112f3f6de7fb630e6882ed46f821
- SHA512 88e9092fe8909b4bd8fedce4b4310b14f293665457be79d82957ee85b09cc0514ee42b8325681711385b6aaec865025b9957b1f42587d5508cde62540b8d1d11
- SSDEEP 196608:mhWUF3SAeb49c3SPWnxDxDyHferxXnx69:mhb3YzHDkyxXxa
- TLSH T12C660186F758E92FC4377132497A5331568B4D528E839B83A9483F0C6CBB5D44F9ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.khel1lk1nng - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.khel1lk1nng - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.khel1lk1nng - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.khel1lk1nng - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.khel1lk1nng
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.khel1lk1nng/files/profileInstalled
- Size 24B
- SHA256 c8991669ce84bb1c42e28d545e7aa00c0940763e2040aa0e97e0a66d5a8cebf8
- MD5 fe91d62c75f3b95e989ad5f4b3a27a92
- SHA1 4cf9a9d4ddf68fbe119d852e119ad1edd863bdd6
- SHA512 165e24bde4e5cd301025e40e00e9db6ee840c045f9fede12c765f4fa7fcd53719d81b1b800194b1189f717756b3644e0f8eab16137aabca98da17237e043373f
- MD5 SHA1 SHA512