Analysis
- max time kernel
149s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 06:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Fable-Race.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fable-Race.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fable-Race.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Fable-Race.apk
- Size 5.4MB
- Sample260802-gyw8aaweka
- SHA256 5260024198d57ff609ec10a7736f43b7150de80f97419f455c992fd914ea0a74
- MD5 579a1408e5f2b6992fa12b34da277458
- SHA1 1c041f5be4212c8b49d39d5a87fc623d8f63ee70
- SHA512 879377cafb05d45f17db7e825d8246414f2dd5afb15532abe9da5a3edde0c7acb316308df29e5441479c86c06200de7d2c2757ef29f9209b334175d10b5c4d9a
- SSDEEP 98304:h3Xm108jhuuf4bDLKayi+wTo7jiLePfGuQVSHxD/AuAXAg72Ero:NXmyIWwi+7QePV7bGz72Z
- TLSH T184462252F3E89C6FDC7781325FBB5B3515926E128A92C3878A10B22C1EBB6C44F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fable.race - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.fable.race - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.fable.race - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fable.race - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fable.race
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.fable.race/files/profileInstalled
- Size 24B
- SHA256 afd96e687fedf4da4a398371806fd9cd9ef87d84bd83f94a6efdfd855ec9cad6
- MD5 0e363437c5c64c35b8cc2a979f8a25eb
- SHA1 c02ead58ffc7b598389efe530ea2d0e9dcd1f388
- SHA512 f31590e18bf651e67781661510a81e38f8d1ed5520a7a1358c22b406a0f95045a92c72494e4b23457f22ad08c586f5bbef2342f8d5f4dad4bdd96edaeeee8e5b
- MD5 SHA1 SHA512