Analysis
- max time kernel
23s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
29/07/2026, 06:37
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
streamo-v1.0.8.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
streamo-v1.0.8.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
streamo-v1.0.8.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target streamo-v1.0.8.apk
- Size 5.2MB
- Sample260729-hdwlpay1bs
- SHA256 64240f1f6426b631cc452b67db41e7290dffb4861fb299f5a3fa1a2323c05f99
- MD5 9222c16a323859ce83e83e6d1b0df079
- SHA1 c09646bf255eae6c19f010d4be516baf3a854eba
- SHA512 71d1a4904d917caa1ab8ab5f118ad08b6e6b8716ec537ce9451977f773f9f7105edc35945d892e7dce3e71835be4c9d25dc36863cafa80dcca7b50034a9c93c6
- SSDEEP 98304:XctUgaIDqYD7wcx1eUM4N85GumLTD8Vid+Snq5E4OzNRsj/COlFJpV2CGRdW:qUgZqI7wciUd84xWidyWNRq
- TLSH T177462352F7E66D2EDCB705355E1A432517129E62CE67D70BA1A4372C6C3B3884F48BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener pro.streamo.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone pro.streamo.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver pro.streamo.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo pro.streamo.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo pro.streamo.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/pro.streamo.app/files/profileInstalled
- Size 24B
- SHA256 a8d55ce44d8e498830804dbda896fecfe474d695bdb02b41d1fc6af54f8353e5
- MD5 c73eb9b0801870cdb5d47946dd447aea
- SHA1 ebe446e4828a8ed6c788c35ac87e27a3e4d211aa
- SHA512 7a7d027528c26a67652a9f8ad4cdd3e97e1cf09bb35aed5f15d02deae004587fe854126a8e036e915c43e0a5e77b86e05434ee3b5adf77d9f324ef9981579e68
- MD5 SHA1 SHA512
- Path /data/data/pro.streamo.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 160df0e327006f167b87d895ff0a7bd68049309f45a648a2697bf29c4840ab50
- MD5 801f133f6d553c38f8a1752cd6c92595
- SHA1 ad1bd41b342fddda2232027c3a1892f6d1df4d74
- SHA512 486312250d13460356e16de16c9a3cec8f62dba84de3d05b2b1b2f9f9c5d58e9f2f43fca5e7bcf47cdd8d60ab4db7e54cad46b2d3358685c0347378ad5fbc897
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/pro.streamo.app/primary.prof
- Size 1KB
- SHA256 7e70374f38893f8ade67965a53eead080a472eb8e85528c4f023ca97fc220d8e
- MD5 03d641e47ae8e41ede16227f86362a9a
- SHA1 1a25bd49c6a3e01a6eb52dca6fbf2e12023654b4
- SHA512 62abaecdc7e401cc72ff0ea1a7fcd5b6031df50b72a38d6a16e5b08b52f90aa9830ba276778c0588eb5ae561c0136e9d443cf315f5c15b4d683688b8e029fc65
- TLSH T1DD21E7EC43208B27C1A01F00ED8651AABF5301CC609121E46B26CF2DDF992D888ECC46
- MD5 SHA1 SHA512 TLSH