Analysis
- max time kernel
144s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/07/2026, 12:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
blockrot-test.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
blockrot-test.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
blockrot-test.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target blockrot-test.apk
- Size 3.2MB
- Sample260727-phw7castfy
- SHA256 d4de26060971132f44590800aeb6640d92f873b76300283712f0d9cc941372ad
- MD5 cb34cfa4a4fbe208dd83ed64db184254
- SHA1 4dc0adead5a06e154bed121c9021c277a76f8468
- SHA512 e5566605386d979d4e19df27aa7c2aeca7708166b88f96232468a04bc53a6efa2312695a451e7cbeecfd85eab05eb97e8fd1964990db82fe5a1006cfb1e50cf3
- SSDEEP 98304:bljHqwfKw1dOJhOGDy3h/5fZTVZxO2tYWR6/a9j/Ku:tvfKmAzO/5fRU+Vhn
- TLSH T128F51282FBE61D2ECC7744320F9B62315712AE03CA97DB078994722C6C7B6D84E55BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.blockrot.game - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.blockrot.game - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.blockrot.game - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.blockrot.game - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.blockrot.game
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.blockrot.game/files/profileInstalled
- Size 24B
- SHA256 9d6bef989c96b4ba2d987e88a59e029cfce1a7db31a2b4d6e8735c8c9f0a0901
- MD5 ce1135002aa5b82864891a442e5bf918
- SHA1 86ebd06e2fb1fcb2c7a7af2406c5eb2be6924976
- SHA512 ebd62d147997b2ce5e5fdb7e61dfc53f362fe4eb5506154b2494c920bf37b18088cf63edc589a9fdd5250cc1764643a7480205d5964875c4d016ab32c2dcd2f9
- MD5 SHA1 SHA512
- Path /data/data/com.blockrot.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 33a5c09ec02f4e3f8a0623f2b3c4043c91c0b3b4b18f7794bf4811f6ca8f2866
- MD5 1db3b5dc18fe8bc716e8bc8747056ad0
- SHA1 13ccbf2cabe7a8d60f2c2dde0c201e513766798d
- SHA512 fe6aaa505f36475a6085cbcd1da513b3f2282e5c6a66bab7387daaac6840306fa70c619848a6a1252dae3226b02b393586ca46d19a5d97b940e5ee2ac0af9481
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.blockrot.game/primary.prof
- Size 2KB
- SHA256 e0cb35eadbd4e70961d279e0eb4f9cc2678e5be870aa1e390cfe7d83bf556df3
- MD5 dd5a6d852b2cb770319507b31db38808
- SHA1 3512da203e659a2416e4865b70dfbc2c90dfafd9
- SHA512 a88e8b7af300be731932a4472a75acfb7ffd96fe45a29487f832c892f221c79b57f351d8ac6b954d175aa314217ed656f3406519994ef02456677ac41d12eb09
- TLSH T1DC5129ED2843A3A895B0001653B1A29A73A813E33522B4C48A70D4CDCA7BF2D95A5DE5
- MD5 SHA1 SHA512 TLSH