Analysis
- max time kernel
46s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/08/2026, 03:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Mahfam724_1_2.0.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mahfam724_1_2.0.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Mahfam724_1_2.0.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Mahfam724_1_2.0.apk
- Size 1.2MB
- Sample260804-dtx28sfl5s
- SHA256 de2bd6a94511d836ea8bb5e7588703babc84671d90fdf5f7c5e44a315a5b7f19
- MD5 7f541ac6a96c3ecd57d9527c4c973d9a
- SHA1 8bdee9f662c42d4c58502f304abfac4230b10538
- SHA512 c72c2d2d37e7cb482074668c6c967cdcd492f1326856042860fcc8b950c0ef9a1edde5de2aaad38b78806cae5d0b4fa4e6c679f68258a1217b057cee20c06ff0
- SSDEEP 24576:k84dxapaGwGq/DP7XP62zK5+vYRI3Zf3+ZhmnHrPOwTZYEpfy:YD8Z2DmWK5BY7OwTZM
- TLSH T1EB55AE86EF05E86AD5F7C6378376867A56064C1C4B93D7830A89B63C4DB76C04BC9F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mahfam724.mobileapp - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mahfam724.mobileapp - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mahfam724.mobileapp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mahfam724.mobileapp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mahfam724.mobileapp