Analysis
- max time kernel
5s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/07/2026, 12:30
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2016wzry.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2016wzry.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
2016wzry.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target 2016wzry.apk
- Size 3.2MB
- Sample260728-ppldeshm8v
- SHA256 7f23532b48024a248833d1fc9ad844abb00f7d06a41625464dd5e754e136db2a
- MD5 ead94822e42c510ae377179f81e3d657
- SHA1 a3e0ed05ed60289cb9ddcd4802e353b1a86b03f2
- SHA512 bc49a081d97ded6b5675f66735ef2986474d27d6ddb8f366295b6f39f69c45209f5cf6e00d200fceb7a077f17e65cafa0f28e8bdf5a0e36d9513ba1cdb8dd86d
- SSDEEP 98304:jeuIsSpYuEHrEHzkuQ2ekfxNtP6fbesCfM7:jBIsSpYpqzkupxNNsncM7
- TLSH T157F53367C09FD8C0CCBD44305D621FDBFAB2016A57F1913609DA0A5CA822ED7FE52A97
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wangzherongyao - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wangzherongyao - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wangzherongyao - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.wangzherongyao - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.wangzherongyao
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/xgcj/shul.txt
- Size 80B
- SHA256 0eb28480068e3aeae43af4487fed609acd4abc0c6c3378bece1c875d3d1e21f6
- MD5 6fcdb6eb6d3840435f34df41774d4b77
- SHA1 8b1e0da7f75bd746daabfec028d47a4fea8fa558
- SHA512 e901b600f0e7947d88608634c2203e8c6673a58bb41f3625caa1506fa8e640eb3cc1d2767422af9e851dc2293164a5c8a655479bb03e90e5022e200c3ebd2c0c
- TLSH T180A0118C283020200A02A880EEC8220322B382EC8B20802CAA80BA222203088030220B
- MD5 SHA1 SHA512 TLSH