Analysis
- max time kernel
147s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/08/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
skyquorum-android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
skyquorum-android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
skyquorum-android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target skyquorum-android.apk
- Size 3.9MB
- Sample260805-pgmlhsfm7z
- SHA256 a8e87b6f6ef6a5892ab87a80b32003b3f28d21a2555fc38f5700f5b4d67da155
- MD5 1a32fa4965c3fcc05604ef101c280258
- SHA1 58e407db54b672715c583123fc43b4a35fba9599
- SHA512 1f425fc6a0bcd9cdb327fa063735e14ff5a513d679b826c84e70925eeba8830d3e591bed458e9df01ce78fbdce40d93ae8d29c550154bfbd10d1f63faceb4bdd
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCbKgLm31:eZjJk75T15b6tUk6z8RdCbvq
- TLSH T1AC161242E3E56D2FCC7782365FFB972A16818E12C692D3038A68721C1DBBAC44F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener dk.klarvejr.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone dk.klarvejr.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver dk.klarvejr.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo dk.klarvejr.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo dk.klarvejr.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/dk.klarvejr.app/files/profileInstalled
- Size 24B
- SHA256 2e530caec080b7bc851dfe9b1a8391358422c7ffefe15f4fb13b408fcfef6d9d
- MD5 8a1978f0f73e8c41eeba2894f66dc51c
- SHA1 a5f3c06f9e3ebf7baaf6b5e2b83154848c1d1b8c
- SHA512 fa8c0bc5d4c517f58eeccf2f6e82b7b75097b43bc1d93cde1bd45aa496a9d542b48389a24512767b18732c6ef449ef6384c37ea1d3a2ff1f1a465ccc04b6a66c
- MD5 SHA1 SHA512