Analysis
- max time kernel
35s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/07/2026, 12:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
blockrot-test.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
blockrot-test.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
blockrot-test.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target blockrot-test.apk
- Size 3.2MB
- Sample260727-phrxmael2v
- SHA256 d4de26060971132f44590800aeb6640d92f873b76300283712f0d9cc941372ad
- MD5 cb34cfa4a4fbe208dd83ed64db184254
- SHA1 4dc0adead5a06e154bed121c9021c277a76f8468
- SHA512 e5566605386d979d4e19df27aa7c2aeca7708166b88f96232468a04bc53a6efa2312695a451e7cbeecfd85eab05eb97e8fd1964990db82fe5a1006cfb1e50cf3
- SSDEEP 98304:bljHqwfKw1dOJhOGDy3h/5fZTVZxO2tYWR6/a9j/Ku:tvfKmAzO/5fRU+Vhn
- TLSH T128F51282FBE61D2ECC7744320F9B62315712AE03CA97DB078994722C6C7B6D84E55BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.blockrot.game - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.blockrot.game - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.blockrot.game - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.blockrot.game - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.blockrot.game
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.blockrot.game/files/profileInstalled
- Size 24B
- SHA256 7b2f5e47b3830fc3b0c536c5fd89472c50b0e38d38eb20f9772b43919e3e3f2b
- MD5 76d0ff90b7fc70a65e3509d40d89b14a
- SHA1 1f3fdae30942bfa169712314218a58c952e67904
- SHA512 ba3c1bed5eab0babe9020e9cd9c35db78c0ae1b88fa7a1861f96f02fcc18f7e5b90dddd8e30eeea5c9fc9b2b2d992b03f317075496189d81c605074b9725c3cf
- MD5 SHA1 SHA512
- Path /data/data/com.blockrot.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 9a7b7b6e3b81fbffdc70d98ba88b1041f836baa0f2ab106de3fb70de965df920
- MD5 e696f4d36dc84db342834d20e5acffba
- SHA1 b6ffbcd2a85a89d1efbde91e0a5f739bb8d22684
- SHA512 98cca531958de6968d9016e7f2c4c6d627659832ec0e48bf7e5194c1614ecd734e81eaee91a07b7b95cc769fbb9085dd6a5cc672daa216f919244a00eb5c548a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.blockrot.game/primary.prof
- Size 2KB
- SHA256 e0cb35eadbd4e70961d279e0eb4f9cc2678e5be870aa1e390cfe7d83bf556df3
- MD5 dd5a6d852b2cb770319507b31db38808
- SHA1 3512da203e659a2416e4865b70dfbc2c90dfafd9
- SHA512 a88e8b7af300be731932a4472a75acfb7ffd96fe45a29487f832c892f221c79b57f351d8ac6b954d175aa314217ed656f3406519994ef02456677ac41d12eb09
- TLSH T1DC5129ED2843A3A895B0001653B1A29A73A813E33522B4C48A70D4CDCA7BF2D95A5DE5
- MD5 SHA1 SHA512 TLSH