Analysis
- max time kernel
47s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/08/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NecessaryElectric.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
NecessaryElectric.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
NecessaryElectric.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target NecessaryElectric.apk
- Size 5.4MB
- Sample260805-pl98daxemb
- SHA256 08b1839ce863f3f83a16f59678be04164c64d39f39cb56274dd98cb3473bd44a
- MD5 6aa9c4150dcaf71814b9f0f86b364478
- SHA1 303c36503eaa543f0b13e35275d87924680379a2
- SHA512 3dc5f8197afd13dc507c15f96db8a90f32a114ab8e3571f32df6025e5e55a7002134a5d772b7456a3d8e1b680b21c9d9f7fbc4bf643e3abfff7d15db5f7b5324
- SSDEEP 98304:ObtYJW2WIXsARRR1WgEoFnM5rNSp8NsXm6u7sK3En4XqBfNpEuo+o/KrQ5S:OoWTIXsA912oeRQ8Ns26u7RwEInNl
- TLSH T18F46F187F748A92FC47750F245BE563256874C128A83CB836E58721C6DBB5D43F8ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener xyz.nelectric.sales - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone xyz.nelectric.sales - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver xyz.nelectric.sales - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo xyz.nelectric.sales - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo xyz.nelectric.sales
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/xyz.nelectric.sales/files/profileInstalled
- Size 24B
- SHA256 23bcc66ff86ec48b79a40006dc506974ab798c585c31ebf17d7f8dc4566bb758
- MD5 a15814925c37025cfce3fb81a1f59f10
- SHA1 78d93a3d2a3f28c85b7eaa24b79da3b358cc61b1
- SHA512 2f4f5ffa8c9e1ffcc5e1cd471255195862540de357c7e3e41f7e5d2ab7dfc18aadbf9ea46ad2430be70fd6f1a8e98d332e7a563332e037f61738d084d657d468
- MD5 SHA1 SHA512