Analysis
- max time kernel
105s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ashare.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ashare.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ashare.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ashare.apk
- Size 3.6MB
- Sample260802-pl81baaa58
- SHA256 5692c711f751bb28d5035005d5d76278c4c131bbbbd07e2dbecc645facb46435
- MD5 9bc6c0dd367f8870df9b76213fb5100c
- SHA1 941f0f29fddfc0df816af57835e7a6a9e3379a49
- SHA512 c2d93d0dfa55e1cf30f3aed637f6dda467205ccd0ddf9dd7218e96b180e3310b7b72d97616e09da5d87cf956f090bac324928acd63664fba460b65ff4044e4be
- SSDEEP 98304:jGfX2wHgK1rNTPBEyhfkvB4/IcG+Sp4q5Vej:OF3d/jfEj+8U
- TLSH T1AC061242E3E5AD2FCC7381325BEB577A15919E42C692D3138A24B22C6DBBAC44F54FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener cn.runmoney.ashare - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone cn.runmoney.ashare - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cn.runmoney.ashare - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo cn.runmoney.ashare - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo cn.runmoney.ashare
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/cn.runmoney.ashare/files/profileInstalled
- Size 24B
- SHA256 a17a8cf24460c75dec4215af5b171d666f7a60ca3d351ec8b903e693de2443b5
- MD5 9dbdce45381871f5e0f582ccd3f9aed1
- SHA1 381fe98616bf8437f2c6f6d6f7ee2c8693840a45
- SHA512 648c98d5d4803ebb7437454765b0d039107fdfffb824967d3ba521c21c147e9a2deb43df9be28ab4e3710a2ebe9edf7b6233ab078e296f8f63651029de9eb97a
- MD5 SHA1 SHA512