931d8de7648307cb119ee44aa664895614477bb7f3e45c7026a933665c781656

Analysis

max time kernel
75s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
01/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bancagob.apk
Size 5.7MB
Sample260801-ajksdatwas
SHA256 931d8de7648307cb119ee44aa664895614477bb7f3e45c7026a933665c781656
MD5 054c02df0ba1bf5b55ced1e4f1ae4323
SHA1 3aec8304bb226de1edee80bb65e5cd43571495bc
SHA512 81a187d31aeba25ad102367880ae8d20fde3b00bdcaf278843859a7304b36b0dd4576f1d30fa1d2dd8eabc0534119101a1b21ab8fb0e63984bee4e5d19f72d93
SSDEEP 98304:O5rgR2oTYrnP/lS9gZmDXreBQFa0bEHp69fu1L7EKc8lmWGtLNh03/8w5m7Ql1dj:sjt7ZmreBp0bEJWm1LPcNtPhm/tmUl1p
TLSH
T1FD56F1C7F798A92FC43710B2897E527155874C528A83DB836D58360C6DBB9D42F8AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.bancagob

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.bancagob

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.bancagob

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.bancagob

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.bancagob

com.example.bancagob
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5068

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.example.bancagob/files/profileInstalled
Size 24B
SHA256 7a5f6143570c71908e43cf2450f25bc857ce33499a9f008d75a8ff6421cf879e
MD5 bf3997ce048367a06f168617fee16709
SHA1 407ea0cc14ee6abbaf7bb0e48a58dc5b953bb94f
SHA512 fce026a615d4bd6ea44cc7d16153c68d69a6571398fd3812de70dc51022bf97fe871efacc455f56d836bb4a4fff37990ab4785f623f33624764d52f72455b7ab
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads