Analysis
- max time kernel
47s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
09/08/2026, 15:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
lsv-maps.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lsv-maps.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
lsv-maps.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target lsv-maps.apk
- Size 4.7MB
- Sample260809-smjctsba79
- SHA256 09ca7d34b8c641a24eeda7c21fec2440cd6a86a39b09f7228c1745576973589e
- MD5 dad8cfa2d1aec9da8dd3b49d7177c807
- SHA1 10d2779a8ce2a487fa0854e03b44ae5880d745eb
- SHA512 88672e921ac96aec8c6cbd4292bc5dfe5f7019ca3e97d7203a27a22b990733bd6009808285ab54b8148783417fe6cf42d8317a5ec1eb90195ed66969ce5c2a79
- SSDEEP 98304:Yfu/BhRNsnG/PEzKSLrEu6w2ECJ/1mLDZVTGx6j0jy6QqiIqS4C/8:Yf56PwEJvbJ/1mZVKxq53
- TLSH T15B360112F3E8AE2FCC73C1325BAB573625828E12C652D7079914776D6CB7AD88E41BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener online.lsvmaps.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone online.lsvmaps.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver online.lsvmaps.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo online.lsvmaps.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo online.lsvmaps.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/online.lsvmaps.app/files/profileInstalled
- Size 24B
- SHA256 3432366155f0343dff5b94578dcaae6a17a1af907c9807de1056e9e0de2d8e4c
- MD5 254dd34128ef0dfc64b4c77a17457441
- SHA1 5415debad47abfbd5fc99e53d50a786e276c7478
- SHA512 d3f5955c7db210388df7f9b5ea78e8dbc249ce1bef749a08f642d19d0804a020edd306a46e326f29ce023fa0034a5e72ab225407924519eaad048205fafba1ff
- MD5 SHA1 SHA512