Analysis
- max time kernel
137s - max time network
254s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
03/08/2026, 15:00
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SpotiCap2.3.apk
Resource
android-x86-arm-20260325-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
SpotiCap2.3.apk
Resource
android-x64-20260325-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
SpotiCap2.3.apk
Resource
android-x64-arm64-20260325-en
5 signatures
300 seconds
General
- Target SpotiCap2.3.apk
- Size 6.3MB
- Sample260803-sdrmvasdqa
- SHA256 be606f5f27b59c0ba63c4da78551394b10303c9c6deae652451f4b66c868f4fd
- MD5 f9e9b1292bba496a748fb5accececa4a
- SHA1 e9fbf70150c9b8f7f7b810e402d9eca43e55b4cc
- SHA512 a1ec975deec909bb33287c17f97e287b2f2dc966f0798a4a3e4d46372a22b18270f762e55e588263c8afa75ca532bea90bff41afe199de7855582427c9b91c8b
- SSDEEP 98304:wrCpgD3NL5vav/wj7bUq0eaZ+I6xXyJ2OphTmow2GmPOd6hkffIyY7cr1lejH0g:CNRav4j7VXW46lcoX9PgffIysVHF
- TLSH T1B2662342E3E6AE6FCC7781361FEB673506514E16DA91D3838924B21C6EBB9C84F14BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.spoticap.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.spoticap.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.spoticap.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.spoticap.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.spoticap.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.spoticap.app/files/profileInstalled
- Size 24B
- SHA256 ad174643793aa67ec4ea659d79a7c80ba187178910ca92e2a4aa9a4f01b6ca84
- MD5 829774f8aafabc462f86c1c2d1fbb405
- SHA1 b30916cb4b4d9e07c5e2f57ed27482e765683bf3
- SHA512 ede838ba6a4a98c657a32272cc61811c061da6be01ca181bb9e5483cc7c084051d582ba70533b8b015d097ec5bb70080a95b993822c2e4041f98d19ff3b0ae43
- MD5 SHA1 SHA512