Analysis
- max time kernel
17s - max time network
157s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 18:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Starlight898_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Starlight898_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Starlight898_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Starlight898_0.0.1.apk
- Size 5.4MB
- Sample260802-wtlnbavtcz
- SHA256 e6a6403320ff39812344e28f18f357161ab6885a6df5a4987f34ee3b408c89aa
- MD5 ea8f0b4daab6e158aa18753038688f4e
- SHA1 1c388d7f2be5fd70fc8ec915867f3ed5bb6b5df0
- SHA512 c934ec1938892f9b59a2b4ed596e430d858f48b05683169971efe6811e0fcb7620c2c74c955a650c965a6fd9bc9eac61751026986e6b56bc262cf8eafebe1f9f
- SSDEEP 98304:DFRn6T3BfLH5qCdIOrmfppp4T4ufwqac9N42dKcoTYrFP4:5d8xfLkCdIEmu4ufw0N4Gn4
- TLSH T1B24601C7FBD8592FC87700B2CA6E52B166474D128B839F43AD48361C68776E41F99BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentStarlight898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentStarlight898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentStarlight898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentStarlight898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentStarlight898/files/profileInstalled
- Size 24B
- SHA256 ee2473e185cc46d7461f48376f884700997e57119a82558140ba55e8e83ff849
- MD5 afb701a3f6c23bac42c26f9ded026474
- SHA1 cfe9083be00ae7a97bcb6dae237b190489b3d414
- SHA512 7c638c175ddf31b596c34571eeb3f4d9d18b9794a8a29f20b6379c649f05c15863b278e9bb5f1f5a26d076786e5a18be08622f86217886373bc2cccdc79a48b4
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentStarlight898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 c60ee6f29a391bd343c49ee58473ecaebc7e77ff9270940f50bdb063638b5795
- MD5 ad3b059fdd6975c2e9a1e9c4578eb311
- SHA1 c5cf7cb17db9b936eb425f30c5c3e7a06dbb8a84
- SHA512 ae2e48143f1a4427897aa22d70a69ba972f5e236f49251fdb7086a0a15b02bbb2e0d85429c0dc22c4aa9bba68d9641ad8867cafa659bd81b3df817fc70973245
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentStarlight898/primary.prof
- Size 2KB
- SHA256 68a02df81b4504dce643d415795156ee7a54f262c7ae8e7fd92bccae3fd2107b
- MD5 4b6accdc8b29ce67b0230bb88208fc11
- SHA1 b9763d9ee3fb08c6c89a8cd56c5e13ebae5dd2b5
- SHA512 a0bf79180a9fd51772e8322cedab0a4038a878c177265554b7a0332e519b7dde7e1c6e776eec7712d0d8cd85b358e1038d3fe13081a603b4f9c2e1ca3f512bd4
- TLSH T131511A8FEF3DC734CD260888693901D88BC6EB5C46FC2425724F54E36A5517E22BB319
- MD5 SHA1 SHA512 TLSH