Analysis
- max time kernel
86s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/08/2026, 09:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
timorstore-app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target timorstore-app.apk
- Size 5.9MB
- Sample260808-k8rbkatfkh
- SHA256 f1869f1ffab2a8b5f847b33c58b3a8d7d35e09d1c78a614b37c5c5f0d3f096d9
- MD5 85f6a873910a3b3d15051a16571e78ef
- SHA1 97190225333a8363bc23a217ef024129710ab3d2
- SHA512 ee40ec082acb1d5ee9f5475ab35e9d93adbeb38157004f345e87ae44e49b7c6d5dd1f7b50015906c65864243469ade056efcfff6c54f77f41513e71d2dc210d1
- SSDEEP 98304:LofhIxi844qQgaCZugjXhwISrwDpfH62yAFK2DbArajJGFlcN4odcHKhSt/MXvoX:QIbyxggjXhwRrwDx62yAFhArajJE/ode
- TLSH T124562252F3E9AD1FCC7BD0321BAA173521568C46C782D7239928B76C2CB7AD44E46BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.timorstore.app - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.timorstore.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.timorstore.app