Analysis
- max time kernel
142s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/07/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Maestro.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maestro.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Maestro.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Maestro.apk
- Size 3.1MB
- Sample260727-w2awsay1ew
- SHA256 5b99b789b980e5208d12ddc3f31ae910147b60cd6424df963b93e87790b61f6a
- MD5 ea47a83e55ccb27a6239172ba4c04c07
- SHA1 acb601588f791ce29241b9794e35429c9e8d0d37
- SHA512 af03e9c3f5f24b74ed0ae3bffe32c603d14e830d1be53b5c4de9067d07db59374a162fbae6006af15e9d587ebc131a609c7f282855a73d3485ffe0333f2c8a62
- SSDEEP 98304:YhrGYUR01Jq1z3GDWr1P64WTK+ET5kgE4fYmw+:MatmsWSJP6jGFk/U
- TLSH T164E51282E7E21E2ECC7744364FAB533117169D178683D70B8A98322C6D3B6C88F59BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener app.maestro.mobile - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone app.maestro.mobile - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.maestro.mobile - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo app.maestro.mobile - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo app.maestro.mobile
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.maestro.mobile/files/profileInstalled
- Size 24B
- SHA256 e982f891400452ce84d9755132896eba271387a6b08a2dcd27f0c13e0103aaa0
- MD5 05073d1b9397f2327b36a8c013088a64
- SHA1 c28ae637f833dadbf526e544d01c99241694a42f
- SHA512 1ba99f9faa8b532506ec1b955c8de5a4426f9d375beec34e172c066bdf17a92ce5ab8bba62ae52030b034ce6b37118c4c76fe7c18c9d09e3589bd6a036aa0984
- MD5 SHA1 SHA512
- Path /data/data/app.maestro.mobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 24c15ad33ed6ff2dbcfca0d36fd1f47501422d8ccf9170984bd2189d46c0387f
- MD5 27b75c18094190847264629eb4c145f8
- SHA1 0cdd52b20cb8c191ef3eb9c96850da4e375b6563
- SHA512 0b789e1cfcd23a9f21fab1e4f443aacdee861fec37565c5b4b0d38d6d9040f72adc879d139beb55c2b88cd9efd841bc11f690ecb5a8c80997e44e1f5f68dfc05
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/app.maestro.mobile/primary.prof
- Size 2KB
- SHA256 dac26accaf2e08445d9a0bc51911518b1f9695b275b27a9f936126a6555b7fec
- MD5 b56c8077b844280f93d52313b703b0ca
- SHA1 9b3506c6cb68b5050c105847d5b2195098796a8e
- SHA512 e098ff19b650cf932662e58b386427642d352681822579ee2a66894fc67c7269c26f79ccf7164ce9b24c08fafeae0b5858238e7ca75e00ca696ab591550514c3
- TLSH T177413C81CFB51F56207FD40CBB7227CF729B4A87DC602062DD46869F97716E385681C6
- MD5 SHA1 SHA512 TLSH