2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0

Analysis

max time kernel
481s
max time network
606s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/08/2026, 09:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IndusInd Mobile Bank.apk
Size 7.1MB
Sample260805-llvadathnb
SHA256 2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0
MD5 9a0180c9d871d1b36f960dbe7dc51c16
SHA1 fd2b44492ff8ef55592e240b7bd3edef52fd426f
SHA512 635f999ee29ed879e544d93aa0721f9eb357f4fbeffb3badf31cab8f5289883c8f5168162c441e959f491b787e9c18b5554a533802909323e35ef380a668a269
SSDEEP 196608:6kbAk5Jp7lrnueqlzZ+g3R7o+jwuIJ+Qur:HbPHHd8zZ+yXjwuuBs
TLSH
T16676128BA385472BC52EC17E54E333B663135D0546E2833BD66CBA1C78771F4AE98B90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.avdkfhdb.android

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.avdkfhdb.android

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.avdkfhdb.android

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.avdkfhdb.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.avdkfhdb.android

com.avdkfhdb.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks the application is allowed to request package installs through the package installer
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4758

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

temp_info.apk

Path /data/data/com.avdkfhdb.android/files/temp_info.apk
Size 5.1MB
SHA256 2c5ebedcd6dd69dcfdf287979cf8d7682545b5a5a0d912d1234a594148a35d9e
MD5 43cf1bc1c61407a8a4a4704d3d6bbeba
SHA1 de9e6228cfd79e27078b4fdd0fc01359fa7e5982
SHA512 2e4e8283dc64ce8acf1b3054bea008e63a10a5208ebd96a7bdb952301a82960b61f45e8a199dcbf582d96baca2ac568754de985a35aa63cb35bacc0d0a49fa6c
SSDEEP 98304:03LJpTxhIDRiQr87qGg4nNd6dIAdPugoU:0NpTw1igZNO2GgoU
TLSH
T17646D04BB7899B1BC83EC07B58A7323612175D424A92975BE91C771C38B74F48ED8BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ۦۖ۫

Path /data/data/com.avdkfhdb.android/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫
Size 5.1MB
SHA256 33a268ccb84e918719832d9b76ec461757fceffaa823e26fffee4e5a2c0a79c2
MD5 f05c4fc84f66633f55a6fbe60f7c14c0
SHA1 ca58b21b6fa73b5b8839d2747632cbe33f65f015
SHA512 7e84d7405a9748ce6c28e098b6f99cd28cbba7d63da2fbc3710b09e57b0a1a7cb73731a5e531108b5da81d00b7ed2080ecbfa83d29c21445a7fa92734e2b204a
SSDEEP 98304:BVn6a9M8UWOLWDxv3MMH1xVWtfT67yomh/e7IKldIK3dCJ:BV6afOLWDxUMUueorcGdIK3EJ
TLSH
T1BB4612D3B774412AF63E853646E297B527028C0D4AD3C663D630359EA8721AE2F7CF91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ۦۖ۫.

Path /data/data/com.avdkfhdb.android/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫.
Size 8B
SHA256 7ddea26e2be1f28697cbafa3768867d608cc925da5630b8613b519459c95532a
MD5 b1554ad7989b9afe44dfaf85b4ec4c2c
SHA1 397a728d4ffacaeb8e3740b63000b1e77797ac84
SHA512 bd2d1489d2263fa0dcb42fe4ba2e598524f94127cea8b5085685b140b14871cab9b5fe7a4e0e189c6a704cb2a9a294c1814cd5a736f91c9af55174da8799f498
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads