Analysis
- max time kernel
149s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 04:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Fable-Race.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fable-Race.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fable-Race.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Fable-Race.apk
- Size 5.4MB
- Sample260802-eqjacach25
- SHA256 5260024198d57ff609ec10a7736f43b7150de80f97419f455c992fd914ea0a74
- MD5 579a1408e5f2b6992fa12b34da277458
- SHA1 1c041f5be4212c8b49d39d5a87fc623d8f63ee70
- SHA512 879377cafb05d45f17db7e825d8246414f2dd5afb15532abe9da5a3edde0c7acb316308df29e5441479c86c06200de7d2c2757ef29f9209b334175d10b5c4d9a
- SSDEEP 98304:h3Xm108jhuuf4bDLKayi+wTo7jiLePfGuQVSHxD/AuAXAg72Ero:NXmyIWwi+7QePV7bGz72Z
- TLSH T184462252F3E89C6FDC7781325FBB5B3515926E128A92C3878A10B22C1EBB6C44F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fable.race - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.fable.race - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.fable.race - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fable.race - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fable.race
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.fable.race/files/profileInstalled
- Size 24B
- SHA256 4eb70bad53b0c3c316a113e6570dc9487299facef8a8ef8660fc466dd741dc03
- MD5 8237f7f90c8961590738109589226fa8
- SHA1 30f646af5012a4f2af35ee2583dd9cc047eccd45
- SHA512 026c6c2825a542a648f22de69d6e1d65cc0ac09652f0fbe75e0a32159b6ce47bd52bf0c7e23a1b6c540e34868a1e06b24c1de7298cc336f51b1ad4967cba7c59
- MD5 SHA1 SHA512