Analysis
- max time kernel
89s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/07/2026, 12:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
rkodownloader-235.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
rkodownloader-235.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
rkodownloader-235.apk
0 signatures
150 seconds
General
- Target rkodownloader-235.apk
- Size 3.6MB
- Sample260731-ph9sfaad83
- SHA256 f07398a990058a30d1a12bfa130272bd1e0c39cf70b909fda3fa260b44a4fa0f
- MD5 ed4d49d605784a0fd2cf701a5890992a
- SHA1 420bf38f54aefc766c873bc8677a2a0d78fa0f3c
- SHA512 d434a7b5785de81d14eea342b6a693075a58cda0e5dc58a3c3b432bd7214d3aa53222794ddfc7b5cef8dc03f34d7901f22094c4b1e346946dba8ef8adc2ee191
- SSDEEP 98304:6OEVSD7KCeGEdDoI01u1PdjJv2XmdeaASBEP3fW2009:6OEVSKC5Etoz1YP5JvsoPAUEPvWs
- TLSH T1AD061242F3E9AC2FCD7380334BB6063A45878D56C656D3578968B22C9DBB9C48F85BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.rkodownloader - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.rkodownloader - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.rkodownloader - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.rkodownloader - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.rkodownloader