Analysis
- max time kernel
16s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/08/2026, 12:15
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
brk-conect.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
brk-conect.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
brk-conect.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
update.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
update.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
update.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
General
- Target brk-conect.apk
- Size 4.2MB
- Sample260807-pfcpxsvepb
- SHA256 1e15ec0d74cc1c0cfbf596506129bf865dbd3227292b02e556fe590743009e60
- MD5 e66650eee573e82253d6422ab13033ff
- SHA1 b7162e1ffd9817b807f077dfb9e240383a5047a9
- SHA512 51b435007299cd172c089e5f7c1b76f5a1cadc269aee170caced81980516325663216c47f0b2f78eefbcd347f7bfea84d5450fdedf515fb2fa7d1354f359acb4
- SSDEEP 98304:y3PeVjEbSOvtXR3pslnn0D+PKMu9dBuBVYXf0Qr5qnK7KCd0:cWiRNhpksuHu9dMYXHoI0
- TLSH T140261252EBD8942EFDF7C3358B7A0A3A54068C66C353E3834961723C18BB9D05A95FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener decoder.transposer.normalizer - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone decoder.transposer.normalizer - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver decoder.transposer.normalizer - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo decoder.transposer.normalizer - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo decoder.transposer.normalizer