Analysis
- max time kernel
140s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
09/08/2026, 18:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
unicorn778_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
unicorn778_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
unicorn778_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target unicorn778_0.0.1.apk
- Size 5.8MB
- Sample260809-ws9czswwcs
- SHA256 4d95d68889047f8ed8b2513ef77c18387c65098d1c84c722475964fbf6df7d81
- MD5 0c71798d6eb208fea58c45a2a5081a0a
- SHA1 81d749eeb990acfe1fec2f598de5424c1b6b3b17
- SHA512 60dae8728b2f3e8ef0dad08a911297176ff44e0bbb295fbc20c20d2c89b8fa18c51921df78cd22e1eaadb4396a030cba3707e66a6e3e12e1e182ac2ab69e38ee
- SSDEEP 98304:DNUh31k0JICygnbeYAXIv/JY5efpppWR475J4Lc9N4sdA2dcp5OoTYrFP:D2c+yAbPAXIv/y56r4eN4oHh
- TLSH T1855601C7FBD8592FC87710B6C96E62B226474D128A839F836D44361C687B6D41F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.unicorn77 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.unicorn77 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.unicorn77 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.unicorn77
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.unicorn77/files/profileInstalled
- Size 24B
- SHA256 3e97066ca2dde90697b19adeef43406651ecd61d876150b10461d2caeba3b7a4
- MD5 dc301d39e8331d0c388efa80bd0fe651
- SHA1 cf57c6382a607c452ed0061c594415d8041f7b2e
- SHA512 227a7b3222c59900da8dae682bd514f5bd73dc4fc81e5b050aaaa0f75a8c0fef2acdb2d5d2ea9cc885f54b09c9f6381aa8a4b718b68bed83ffc6bb4944c36d44
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.unicorn77/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 9ad09178c84b92c4536965220216916dcf23ec43b083e799ee9f607c821c8c39
- MD5 2ffab8b730393e5532039d5e0f2a3f5a
- SHA1 1e970b8e88a921e6180637221a61bd3a22b4ccce
- SHA512 cb9778490fdf705c9eef8ea124888e54261625fe9b5454acfb9151493085a1d6f8d53e765f43e09b98c02466f2edd92e532a35bbb339fb8620a44919967be833
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.unicorn77/primary.prof
- Size 2KB
- SHA256 a6419c010f9d7ffc67a1c9a5d1da9e4d5a77e00412c1fdcc89781b5f7e972a17
- MD5 2d509203479aa7a5c7ce7a99d0bda533
- SHA1 f45bb0cbc6c8ac7682bcd65a635229d1409e9860
- SHA512 bd81d624c61d4c02679079b908a60eba5a123d50954caa8987947f5db46e601c8b997a703642a429cd8db6193485662efcf8c6578362bd23534e777a0e2da5b0
- TLSH T18951193B4A3110354EBA9E06235996CE12F3A30C23A9A1719E69483B8E456FD1E40A89
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.unicorn77/primary.prof
- Size 7KB
- SHA256 b7f04f13f8c0ddf201b3028ca0303bd6816705c5636c0c766b894bdf773c0f63
- MD5 a73abff64029a761e33a914f39bfb950
- SHA1 b77884614fbcff11acc227e16b58e01df7b6fbd0
- SHA512 d0b25fa42d1ac90be66a7b9d53c30e8201fa84997f8f5a747d6af3c19dec3a04716e264aef094212673c2c680e9274501e0c177e758a4d2c4fe053d69d32a0d1
- SSDEEP 192:5IBocTiOfytPhfAJ/irtFP8Eiay6b4lc+nfj9lDax/91:eBzNfytPM/irtFk+wLfvax/j
- TLSH T1CAF19DCBD8DECA57C5C394D3526FD6C1A10D4721AFC36B0733CA739898153C28A9693A
- MD5 SHA1 SHA512 SSDEEP TLSH