Analysis
- max time kernel
121s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/07/2026, 12:31
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
affiliateBangla365.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
affiliateBangla365.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
affiliateBangla365.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target affiliateBangla365.apk
- Size 6.2MB
- Sample260728-pp92sahn6s
- SHA256 161fab065b9dbf19269abff36798a0e660d2bd59cfa64ec7324f7cf4d901eb3e
- MD5 0af4a6e84e21e81edb4db88e367f3007
- SHA1 4794b3f09b971fe1eeb5a21836cb0ed85215e446
- SHA512 e409a0ed765fd1a6beb1b1c3e6ad74d922763ac567bd6827ab75f61f3c37b30c080da0b87815791168eb210dc797e13e80b40a37b2adcee1c7787d2e293c20de
- SSDEEP 98304:j9r5KS7DCfAtaIF0robT7usDt0uchh98W8q1I5S1uqj41Tt0ryvCy:j9VKS7DKRo/7usBbchX/dI5wuq+Cy
- TLSH T10266F19EF719992FC87710B28C76523352574C12A68357B36968331C38BB6E88F49BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener co.median.android.mbdzlze - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.mbdzlze - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.mbdzlze - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.mbdzlze - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.mbdzlze
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.mbdzlze/files/INSTALLATION
- Size 36B
- SHA256 fe7cb0c68f2a5658aba40c79b5c6af2fe26e4f998e35eee5356e3480f59069c5
- MD5 6191b113c18055ff3a4564e174301aa2
- SHA1 fcf661b7b7ca5ad632cbd49c3ab84a5838d648ce
- SHA512 638ed9ad52b6d9a082a08e1faca4f96cb71ac9469927a067fb4e2f4137acb0d8273e1e1a1a320dd6c659f40d16b8a1a7e117c2e6942f8c7ea5816096d61c717d
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.mbdzlze/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 f0c43b05116a7c9a8c1c9a3dd4a2bcbec9634429489e0434c345779cfb442349
- MD5 fd83f53619527eebfb94392877cf6a9c
- SHA1 5f114700e75fac40ed949c77c25133f51483a8d2
- SHA512 a94666ba8365453aa65bf470faed54ceaa226fdbbd97b0de234ea545429f9a05df585ba557ea809911bf6a1871d56ea5f9af4fc94d1fead8a7aa920f3352f7d1
- TLSH T12741F674C9780DB399C82864B25E521B7A72615F2FD6391DFB8C162C1F4C5BF69B420C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.mbdzlze/files/profileInstalled
- Size 24B
- SHA256 c65eba296d3237f2b6ce93e2e15e78c7a0e760a48cffd1d570d5d79e6f725c55
- MD5 6e36e7feafa1e2dbaa13948e1022d5d4
- SHA1 5f48a16316309578b7e001071bdc2777b45be5e4
- SHA512 070bae6ae79d52811e7287241cb169e47acd0af4c1be2c4086ffee68e2966fc760bbd7c36fe3c2adf335ab4fad35fe335b3ba6ff2cc848770087978d2d638f00
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.mbdzlze/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 66660ab2f7f5795737e8dae77b3e1f10cd44812f8d9c3fdad93e353880052501
- MD5 fe027d85bc3aafbe405a63ec510ee360
- SHA1 81f509092369b6f379912244a213a560e565e2a1
- SHA512 7b7f08ec8e374b216e6ea2499884fcf88b82623d3d41cac48c68d359ee6bd34534be5cb2c37a43b03407383175ddfa79a91b3d7fc68b8a0d6e3b5db84e8c6307
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.mbdzlze/primary.prof
- Size 1KB
- SHA256 a3fcabba4ad632e6501e9372f4f17ebe2f31abb236683a42c8cb65f465673ff1
- MD5 e59bdc56719ae03d7b270730f599767a
- SHA1 023ad1796207756d124f2766735a58e445a4fcba
- SHA512 e6cd464e8338e59ff4bc5aba60c457638069ad31b7725fa217c26f249dab5be5c49f2692ec18f735d4a1eeb87003aa3fb1bd8a9c716a9947d0dd5119234ae33a
- TLSH T15E31FB19986EBDC6D13210F7BDE15A1A7701D7943D819FDC2D26A6C121C86E5580B8F1
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/co.median.android.mbdzlze/primary.prof
- Size 4KB
- SHA256 cbf2ffd50a98e6fb287c07dbbd7a914ebbd0847c04838f90b9fc5128a0dbd1a9
- MD5 ea932db97737c3b366cfac17a3a7e88d
- SHA1 356302ee7992771826d034df019ad3896ae30288
- SHA512 7c571d63cd221b172f7f6bbdeac9b10e41cdaa4d5e93c5c8c5e664b6cbe690d41248b94abedd497d7158a01493c2d01a1da687faddbb889024b5c551347daaae
- SSDEEP 96:f1ayqSDQXHZ2ggy+jnAFSHJDayFkNJMMhaBvZ64HNngz2X/yx9n:f1KX52c+RJDapNV6fgqXI9
- TLSH T189917E12933B2F0E628DAC1A46860943973544DDBFA10FDC249EEAD1DC4E9F898B2099
- MD5 SHA1 SHA512 SSDEEP TLSH