Analysis
- max time kernel
48s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/08/2026, 02:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target EdenAbacus_v1.5.9.apk
- Size 8.7MB
- Sample260805-csmpfaca87
- SHA256 ab57bec616438970942606580e6d18fd385b42b1da944490dd896ed4a5197258
- MD5 9d044dd09cb2893157855c0845202dad
- SHA1 3e8060d690299a6ef5fefe3b79546e7e90433280
- SHA512 6a49afee9c7d0523a0355f74f3a01dcba23aaa2f81ba36b97edeeea1cd68dadb3c55bee22aaf5f642814e33dc5a997de8a3caa6b2115f678efd32597835e4cee
- SSDEEP 196608:WbNkCnzHgMJql073EvhU5qcGroLYaux6666666666666666666666666666666Zw:atnzHlJN0vhU6ofuL
- TLSH T1C396BFC75AAAB42DFB3391BB939AB7A6C0A7AD0CD620C1CAB470F73454738C41F15964
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.eden.abacus - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.eden.abacus - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.eden.abacus - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.eden.abacus - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.eden.abacus
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.eden.abacus/files/profileInstalled
- Size 24B
- SHA256 db4aefd9e4e2c6a49b21219a1b7c02a82c89686ae6fc1d6bd9db1b1e915ab363
- MD5 e8ba1baa1f10b86a4ec16739ec61d860
- SHA1 4d17f8d7097440ee695d9bde28280eb795d001ff
- SHA512 fef8a630acbd50208841d4d7e82baa586136e4100383193a21ab31a46fe2a6c441b1b60f125e090298c3972fe23574ed0ed18f2de716560096b8e6cca7b983e4
- MD5 SHA1 SHA512