Analysis
- max time kernel
17s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/08/2026, 13:30
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
a710209edb0b786d20eed3ac5c656546e40da8a07e9f771014434cf656934778.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
a710209edb0b786d20eed3ac5c656546e40da8a07e9f771014434cf656934778.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
a710209edb0b786d20eed3ac5c656546e40da8a07e9f771014434cf656934778.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target a710209edb0b786d20eed3ac5c656546e40da8a07e9f771014434cf656934778.apk
- Size 2.5MB
- Sample260804-qr76msfp5x
- SHA256 a710209edb0b786d20eed3ac5c656546e40da8a07e9f771014434cf656934778
- MD5 aeb1dd5f06964c09d00fd5212e3eb7ac
- SHA1 dd5904819c3b1bfa42ccc3ac7849a5b58d6ef46a
- SHA512 a8163422a60b0c0759b1b6143410d92ab1562133b6cdad1ec8e9f85e1e34deec7ad317b0a0a3885c5846f0c9f3f88bec5bf3ac8f4002d2d7c8296c88c8a28993
- SSDEEP 49152:YHwBKhCTjPHOrEYVfXYpYFKmgej2y3UPyxEwwyY1I6CS4jaEyYS:waKhEZAYG2y3U6xEwC1IZfjnS
- TLSH T1DDC5CE86FB58962FC8BA05330DEA923122578D478E839B437848375C79776E80F59FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.newcartao.protegido - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.newcartao.protegido - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.newcartao.protegido - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.newcartao.protegido - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.newcartao.protegido
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.newcartao.protegido/files/profileInstalled
- Size 24B
- SHA256 dc7f142ee9c99caec25a950aec4f7940a9ba4dab9d2998defc271f780082f5c7
- MD5 52506670bc9358e4abb2a1132d592428
- SHA1 9bedc2358e2847d72f4b0807e1a2a94e5faf7c0d
- SHA512 6d1e6f0ee7f9c1500d2fbb0f722d16eedf37b1a664a7734e701d2bf350796fc8b00a571422785b3d8f2b159fe7ebab0298bc89bdc2909bbb1729bd036262444a
- MD5 SHA1 SHA512
- Path /data/data/com.newcartao.protegido/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f57d03167297309a6a7b6267fd617a2a8fe029444fdebfbecbdbc12de79ef459
- MD5 2de980913d480a1f40c5da983c4d8095
- SHA1 0fe5a3e67a94a8c5f68bcbf14e994da50bbde491
- SHA512 8c7ae29fc2c69d94679eae6478d82dd3de024c66be5d432fb0f6eaa3db4bc044bfcff90ef2a30aa0e25adc085fb308c2532d4a6f96f371736496f98ff392bec5
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.newcartao.protegido/primary.prof
- Size 1KB
- SHA256 66e6e82feab4b3022e494d62252d46cb4d1706be5d65dcdfc31d8c642bdf8c6e
- MD5 1a028680aa3dc032c1900edf330d3acb
- SHA1 b078c881a7d151f27d9d8e5159dde47bd4210e20
- SHA512 83276d62a5a26903b015cf41516d73cdcbc62e0184dcd287bc388a5d3a86ee54f6e2610121c56d7e288b7b0c0df2f0312dfc3e5bb846c62ee52e1cb3c3a81000
- TLSH T1F6212943807E86ABF02180ED5FC5546F37C2CED20FEE129B104C4A3E50252C383B1467
- MD5 SHA1 SHA512 TLSH