Analysis
- max time kernel
73s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
03/08/2026, 03:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
gal.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gal.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
gal.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target gal.apk
- Size 19.3MB
- Sample260803-drccrabd78
- SHA256 783ab2dd94364f468f6d89df7f944f8af20e6b0bab44a9b26ea348a0505584a8
- MD5 1392090e818ebcb37b12c4215a502cf2
- SHA1 f3b8d06231936ba0be3552abc88ed37020769fa5
- SHA512 fda157b656ea6dfb6c680b097d899974f7edae6383285d9e8013d603d6577de80bb714e9c4f598769b2eae894635da7db00657546e596fb831381e38f3c56a63
- SSDEEP 393216:hfw+lInLbsuUFGpcc/yM3LDMlgCzwgAWHpLZmI7WjxoHXdaa4oP:hVlwYuUFTcVCvAkz78yT4oP
- TLSH T10F17238AFB8DE92BC4775133497A527641874C1A4F8397836988724C29BF5C84F9EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.webs.sample13 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.webs.sample13 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.webs.sample13