Analysis
- max time kernel
79s - max time network
154s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
05/08/2026, 02:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
EdenAbacus_v1.5.9.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target EdenAbacus_v1.5.9.apk
- Size 8.7MB
- Sample260805-csmpfaca87
- SHA256 ab57bec616438970942606580e6d18fd385b42b1da944490dd896ed4a5197258
- MD5 9d044dd09cb2893157855c0845202dad
- SHA1 3e8060d690299a6ef5fefe3b79546e7e90433280
- SHA512 6a49afee9c7d0523a0355f74f3a01dcba23aaa2f81ba36b97edeeea1cd68dadb3c55bee22aaf5f642814e33dc5a997de8a3caa6b2115f678efd32597835e4cee
- SSDEEP 196608:WbNkCnzHgMJql073EvhU5qcGroLYaux6666666666666666666666666666666Zw:atnzHlJN0vhU6ofuL
- TLSH T1C396BFC75AAAB42DFB3391BB939AB7A6C0A7AD0CD620C1CAB470F73454738C41F15964
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.eden.abacus - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.eden.abacus - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.eden.abacus