Analysis
- max time kernel
146s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
01/08/2026, 18:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Guru303.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Guru303.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Guru303.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Guru303.apk
- Size 2.8MB
- Sample260801-wrc86aef77
- SHA256 6d357da7a7322750e5a1925f00f625e47b2c5893c0f6b32536a065483ab178bb
- MD5 5c997f9e051d2546db95dc0da6f5b354
- SHA1 8faea55ff23406868fbf01e8bb3dd707707051b4
- SHA512 00f679214c6d8d0c94be1bde8db65e4e923a109a06ae9fc3eb760bb5b71e47cac941714ef8a43db3402fff46b5522097ea73df251846cb33c0d0d80059290a9f
- SSDEEP 49152:2fKouszPH8feYKamLuKMwlDCqe1HDVkuQHldfjC4g8Y76kGgOloZgPf+l:2fKou4H8feYURMw8ZwdOH8VF3+l
- TLSH T15DD50182EF65D82EC87705370EAA1331161A9E5EC697970385DC722C687BAD80FD9FD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.p4d_guru303.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.p4d_guru303.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.p4d_guru303.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.p4d_guru303.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.p4d_guru303.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 877861f9311c2e67fc0d9c155647f8a50d8e04d761d6b69890449136cba38996
- MD5 d96b650227cb4f0d68578d299e4f72e1
- SHA1 6dc14b9b34f9edd75a6ff16e084ae7c8e56c7bc7
- SHA512 2a3d29f01aca729867614d799d4764ae7f6675bfee41ce11e1482ba2d80af27c2eec51f7bbf846cc5a126075dae2b078bdcfb127dfe58b8e8997b042e3da7f3a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.p4d_guru303.app/primary.prof
- Size 2KB
- SHA256 ae9c43659daf444d913f06936669e30b27767e0f2500844762cae00644eefbb6
- MD5 341011edce27531b3e4697f1203f34c3
- SHA1 69c977d16ddf2c5b03af624bbfba1ddf2cccaae5
- SHA512 9c907a8e3be2a10a2847ad21ff5c3fd2c36ea67caa8784d4aa9518e1d117bad9a751a9ac7e82054ce88baefc6d175895ee985c4f0c7ab676f7b8e70c48581167
- TLSH T183413B05DD051A3F02D02E0D4A5CF6391AC4794537AE1D20BDCF0ADCD2D9A242A917F6
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.p4d_guru303.app/primary.prof
- Size 5KB
- SHA256 a1fa57afe287127600efeb996cfe76878f79236bdc4eb0aa0eb7ba08dd6dc9a1
- MD5 b7b028991913ab5991efd3ebf0e6c5c6
- SHA1 68723a0401860eb9f8702f1f94c644db5d1a7994
- SHA512 a70433a9880f20fac4d6b0ede961f8218ed4c16c4c9d2d23c5d2578ff947fbfaba71b661666dbcce6cbf814c780b7152f5df721d10755fc4cb090a32e76027a4
- SSDEEP 96:b96Pipdk04FkpwXhUUXaYzvPj/8ttt6VQtEK8Gs5eRR6YvZzWeNa5glCLRbwqI:p6apdpJgLaYzvT8tttlEKW5eRRnVWtxK
- TLSH T14CC18DE47337A918421485163CEDEC80533F244B82D01B184AE9E32A892D9632EB0CEA
- MD5 SHA1 SHA512 SSDEEP TLSH