Analysis
- max time kernel
149s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 06:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Fable-Race.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fable-Race.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fable-Race.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Fable-Race.apk
- Size 5.4MB
- Sample260802-gx786aeb74
- SHA256 5260024198d57ff609ec10a7736f43b7150de80f97419f455c992fd914ea0a74
- MD5 579a1408e5f2b6992fa12b34da277458
- SHA1 1c041f5be4212c8b49d39d5a87fc623d8f63ee70
- SHA512 879377cafb05d45f17db7e825d8246414f2dd5afb15532abe9da5a3edde0c7acb316308df29e5441479c86c06200de7d2c2757ef29f9209b334175d10b5c4d9a
- SSDEEP 98304:h3Xm108jhuuf4bDLKayi+wTo7jiLePfGuQVSHxD/AuAXAg72Ero:NXmyIWwi+7QePV7bGz72Z
- TLSH T184462252F3E89C6FDC7781325FBB5B3515926E128A92C3878A10B22C1EBB6C44F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fable.race - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.fable.race - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.fable.race - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fable.race - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fable.race
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.fable.race/files/profileInstalled
- Size 24B
- SHA256 c20abd002da1961beac6379552187d557027bfd56d4fd6aad9dc7a5da4319128
- MD5 0b4c895dcdc3314ffefb979666d7335a
- SHA1 a3b86a7f4ce1044e507001e7bad84e74ae36dc6f
- SHA512 cce65cf62a0c11c309369173d5920855e011023e1a17bad1a23af2e8d1fff8e74f1ad4a89b1a855c3de06430c06431f758ab957d19c1a8296f6e42e79ccdbd80
- MD5 SHA1 SHA512