Analysis
- max time kernel
4s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/07/2026, 12:30
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2016wzry.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2016wzry.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
2016wzry.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target 2016wzry.apk
- Size 3.2MB
- Sample260728-ppxfpahn2v
- SHA256 7f23532b48024a248833d1fc9ad844abb00f7d06a41625464dd5e754e136db2a
- MD5 ead94822e42c510ae377179f81e3d657
- SHA1 a3e0ed05ed60289cb9ddcd4802e353b1a86b03f2
- SHA512 bc49a081d97ded6b5675f66735ef2986474d27d6ddb8f366295b6f39f69c45209f5cf6e00d200fceb7a077f17e65cafa0f28e8bdf5a0e36d9513ba1cdb8dd86d
- SSDEEP 98304:jeuIsSpYuEHrEHzkuQ2ekfxNtP6fbesCfM7:jBIsSpYpqzkupxNNsncM7
- TLSH T157F53367C09FD8C0CCBD44305D621FDBFAB2016A57F1913609DA0A5CA822ED7FE52A97
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wangzherongyao - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wangzherongyao - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wangzherongyao - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.wangzherongyao - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.wangzherongyao
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/xgcj/shul.txt
- Size 80B
- SHA256 7067d2f761414712418b5ddcca8d44290bfdadbea7fb2e54ba3907ba5f1d7009
- MD5 aa4287434b6196bc30abe9a2839c8497
- SHA1 bf915b2b473078b27f17b17f3963d4318b6cbd5a
- SHA512 60a0de6ffb42f2e710bc222e8a833abdf8ddf02f55cbd1754577a58e324231a5487d94705d2748efe04755be88b5ea95f571fa16fc80749317e44cf41338865a
- TLSH T15EA0118C283020200A0AA880EEC8220320B382EE8B20802CAA80BA2222020880302A0B
- MD5 SHA1 SHA512 TLSH