Analysis
- max time kernel
148s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 00:33
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Dandys_World_CHEATS_V2.0.0.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dandys_World_CHEATS_V2.0.0.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Dandys_World_CHEATS_V2.0.0.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Dandys_World_CHEATS_V2.0.0.apk
- Size 7.2MB
- Sample260802-awpbbsba37
- SHA256 9b6dedf8693ae4476db5f96e3088990cb95fde9a29e0ad3cbbdc1e823f2da6e4
- MD5 bb853bcdadbecb5f8bc4bcc6227c3b96
- SHA1 d8d3859b54c0a3ba85cceb5231f6fbd94aa0b864
- SHA512 c176a9a8535181aba3fc27812fda7766a6b22b19d8f421376e690e7cd5ad19144c4985d212c7857e063a1f005b0454f6614b5891b2089999796a6f75f4b3abbe
- SSDEEP 98304:Q6d+A0GHSM5SbiIMWC/AViJ/XDC3Que/C+pYMGSKKce4MtjZAOY9AaDcPpPnG/hZ:gM4eZf9zC38/CfMGSuYZC0PZG/hbpXAu
- TLSH T18676E188FB8CE52BC4775432857A5622818B4C1A9E83EB53B958760C1CB76D50FCEBCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm
Processes
-
cRhvdKonf1752.OygVdHbm0jTGnK91735.LgrR23.AhbEcHm1⤵
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5055 -
logcat -c2⤵PID:5094
-
-
logcat2⤵PID:5110
-