Analysis
- max time kernel
149s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
10/08/2026, 12:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KapalSlot.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
KapalSlot.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
KapalSlot.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target KapalSlot.apk
- Size 2.6MB
- Sample260810-pjdrdsybpe
- SHA256 f92f657ed6645a409c100699034953a69ff27e22c238213a9b138312b8cbab77
- MD5 ffe109e4bdbde7c296b5576f1fc83f75
- SHA1 eec19746d40a26983bcf354ae4ac3c747a191d6d
- SHA512 217776b3e017b1e80548ed539c44afcf4f9474028196e4d520a6b5f1dd8f4f1821a8818825c9c60a0ca25282187aa0d49eae93f2b7f3939b2181d13aa06730f6
- SSDEEP 49152:AxE1kqEWzGA4qzVLEix0bkaWUYTQTTdK7o2N4prS4c/nldSjCWg8YAnlbgP6UDW:hKqZLES0bk1UYETTUiW/ldVF8pl3UDW
- TLSH T14DC50182EF65D92EC8B7043B4DAB0331165A9E1EC592974788EC362C68776D80FD9FD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.p4d_kapalslot.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.p4d_kapalslot.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.p4d_kapalslot.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.p4d_kapalslot.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.p4d_kapalslot.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.p4d_kapalslot.app
Processes
-
com.p4d_kapalslot.app1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5058
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.p4d_kapalslot.app/files/profileInstalled
- Size 24B
- SHA256 6d5a2967483b6a06e2acbefc83d0275991a0fe11430ec2a01ec5ae66d61e30c6
- MD5 43805cb26affbaba574ce29d5dd4176d
- SHA1 4c4ae28d19c78c51c1da38e6a119bae0ee338f60
- SHA512 a1b1cb77f20af1ba06da73345548f06ce55528b5336982d5a029a46d39943100b312969d97f8cd5d163c25910cd810cee95b4fe98af96ac09d9c2d597d9fe9a2
- MD5 SHA1 SHA512
- Path /data/data/com.p4d_kapalslot.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 25f3621bca5d0b25c70c5bcc95454de2b6005d9cb18dd21cd9afd7d814fcec31
- MD5 ca0b1c59b6ab82c49177b2d3b91675df
- SHA1 6c2d162d5611736300d52006a1681f3d33256769
- SHA512 c7d8c6936f5e9aa0fb18822ab6567955dd189298acb1829214adf774aebb1c7f38b253fbc98c7ae5c5b4a6ca6a6e45344e921d5b66bf1f4b252e19d0aeb050be
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.p4d_kapalslot.app/primary.prof
- Size 2KB
- SHA256 a973d73059993ff6402470055f2b4ca158ba3c5d0b66b2af774f4c26225d12c6
- MD5 18ac5c6d1773462e76cea75253e4b97b
- SHA1 f7347d4c2ac8ab8baf03b7db73a87dd74c5a47b7
- SHA512 8bfac8b4d104ff81b6d3b9185aa74bb26b6d6b0bcc17b1fa1f15cf484a6116677a333c8c626771778873422902d4ca5c617d31d3cd56359c3bdc20ddb2464361
- TLSH T155414BE7663B38745CD19852BC9B48E428A4DA1B1C79942EC58EC8808306B7BB388E60
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.p4d_kapalslot.app/primary.prof
- Size 5KB
- SHA256 a46467a111799d59e8c2fd475588a135b6b6938b1ab7afca02eb8f2de1931cdd
- MD5 2edbf5f21a958472dd5d8232557c1867
- SHA1 ec4135f31dc5e10eaa2e298fb24cceb7a3293ee7
- SHA512 ad10e7d442ede34122917e9b720301f95ce779dfd666a6125d6dbd1bb9c7e0cc563c566b03f67adbf8e8868f853cb2135e949bcdd77b2a361821630c73901d03
- SSDEEP 96:QHJ8lsrVkIHdSmzmlZ02mFq1t6gMoGEgo5Yd79JZz9dGg7avyEral/AxWSgOd:KJ8uGu9zmlZ02mFAtqorK13xkvzGIW/2
- TLSH T193C1AF02A498C53958EC346D07710D153E599C1F3FE64D398CBF9D1BA1B36034358E6D
- MD5 SHA1 SHA512 SSDEEP TLSH