Analysis
- max time kernel
25s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
10/08/2026, 18:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Taman77_2_1_6.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Taman77_2_1_6.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Taman77_2_1_6.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Taman77_2_1_6.apk
- Size 4.3MB
- Sample260810-wxc6caep5w
- SHA256 4a000fcdf60a40a664963bb1f6a7771784f836afdced0771488ae0ea2cfeee03
- MD5 6638714163f780ad3b982a05c1186011
- SHA1 8b095b79092d5fee67d7171323f230b00c82632e
- SHA512 d46049ad0c0e71b961da8dbc71bfd13745fde3b651c161179b77d1942b0d13396a472483f4690dab380dc571f8c4d70bad02590368b732b3cd81ef2933f28d14
- SSDEEP 98304:VXp/Ah76PodNtHX3b1w8pY4+4glT1Ki5iqybPcLH/mjDTtk:js6PW/Hw5HT1KiiLcAD+
- TLSH T18F261282F7696A2FCCB7C0320A9A573112568E26C753EB0B64183B6D78777D80F997C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.arena.Taman77 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.arena.Taman77 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.arena.Taman77 - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.arena.Taman77 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.arena.Taman77 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.arena.Taman77
Processes
-
com.arena.Taman771⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5028
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 b8ed1061b451b8e1fbf78de0858d882d3e0062325efa23856c9db7778fc27ca3
- MD5 31e4ca8c01b299c6ba22c1e0217dd5c9
- SHA1 c92bef3922dda014557aa5b8287d3a1bf86daa9c
- SHA512 ddfeb16a869630721e4549271f98397c167af65d7f7e58a20abdeda3b3915c7cde3b6206f3c2b522a5116a0634cff6ca0246254eafbad29d86dfde0be07cb767
- MD5 SHA1 SHA512
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 b775a4ac4e857b7827f18c4744c4cb85318a68efbc3727c456c84e57e451dbb5
- MD5 eb10169060c0db04dfd9f36855c2c749
- SHA1 b090960cb0f91fd0039e7799a45773701daaac55
- SHA512 4dc762c21286ad28264ff4c014ff344a2956d5a76815eda9e34cc2649a369a79e41c9c5e9682c67330286aa6b23904fd348e171a4682430cedf4f424688afaa4
- SSDEEP 6:Ku2di67EJ9FZdrlOERX4PBX4ogLugMBX4suuK+/fC1+siOw2:Ku2L4XzdTRmBEyPbP/fCaOw2
- TLSH T120722B515B448D57E52E437260C9CB451DE37B184F9ACB47D5540865BC03BCD5858E0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 aa3a0771b35ea1ba15a0a6bac991f885f3285af62ef4efa9b918c8aed02b7060
- MD5 ebe5e3f88e51e03f17344cfbb38b6781
- SHA1 1a5ccb66f0ac2277fa42579ca26a59fb75ce892b
- SHA512 ab540f42df830e4c4538b16b770177ecfac11284013bc10ad2eedef51d36fd1941fe358062db3d908ffded14774fa32ba624dbe15c58b07a6818280665ae2c2b
- SSDEEP 96:Y0paW/mDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:Y9zndjnHt9S/f8JzSV+6D86T0ED
- TLSH T1D8B3208D0F1D2600C0A9A4B095D00EF1793F952E9B97E3E1E5910075FDE6922ED29CFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.arena.Taman77/no_backup/androidx.work.workdb-wal
- Size 120KB
- SHA256 61b0216263a3fad7426d97542e00939b1a93be5912fd143be4db078429ca4c58
- MD5 8c7b8d0124b72a402516ee39d88f3bfc
- SHA1 80b8c2d1521fabdbba532a7ab26bb7765bc3ac2f
- SHA512 4aa4f0a876571aa360ff9851bdcf47507d25a155be02b73c34c8e8ebb5084fe4dd1af19d117855695ce9d81e5bc4c29bfd5faf27ed86c5b30d474107e4fb287d
- SSDEEP 3:RDvrIkRn2kHwzXtRKVjWa/AlloomIgll+c0XllgoqKXtRKVjWn:NQ72Vr/A/1mIhc0p2Vq
- TLSH T16EC39BF32768D837D0141778DC6BDE941403D914579C5D75D40916617C303450538008
- MD5 SHA1 SHA512 SSDEEP TLSH