Analysis
- max time kernel
149s - max time network
154s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
05/08/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
skyquorum-android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
skyquorum-android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
skyquorum-android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target skyquorum-android.apk
- Size 3.9MB
- Sample260805-pgmlhsfm7z
- SHA256 a8e87b6f6ef6a5892ab87a80b32003b3f28d21a2555fc38f5700f5b4d67da155
- MD5 1a32fa4965c3fcc05604ef101c280258
- SHA1 58e407db54b672715c583123fc43b4a35fba9599
- SHA512 1f425fc6a0bcd9cdb327fa063735e14ff5a513d679b826c84e70925eeba8830d3e591bed458e9df01ce78fbdce40d93ae8d29c550154bfbd10d1f63faceb4bdd
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCbKgLm31:eZjJk75T15b6tUk6z8RdCbvq
- TLSH T1AC161242E3E56D2FCC7782365FFB972A16818E12C692D3038A68721C1DBBAC44F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener dk.klarvejr.app - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo dk.klarvejr.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo dk.klarvejr.app