Analysis
- max time kernel
46s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
11/08/2026, 04:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
launtywallet.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
launtywallet.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
launtywallet.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target launtywallet.apk
- Size 6.7MB
- Sample260811-ev3jsawaqf
- SHA256 32eb2e92e074086071f0f2b546c97bbfb3d5ea106d634c0022f95f57d6472857
- MD5 c023a7be2f18a5f12baf62440583992b
- SHA1 bed07f18eef35084342ec0da4375e702f2a18e37
- SHA512 99b04f322ff1c6fe984dd361e9f00ecd8cd905dee0f68055fc0905f08135ebfd9b06655d3cf769c457d4f33dd057732025e15f3dd87a2ab0a6bb19a9fdba7f44
- SSDEEP 196608:J9FK6X5D22RqY6daCUeRWwv63vtM7nnhW1xLt:J932aH9C6FahWF
- TLSH T1C1660146F749DA2FC837713249BA5731524B4C168E839793A9583E0C6CBB6D40F9AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.trustmoni.Launtywallet - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.trustmoni.Launtywallet - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.trustmoni.Launtywallet - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.trustmoni.Launtywallet - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.trustmoni.Launtywallet - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.trustmoni.Launtywallet
Processes
-
com.trustmoni.Launtywallet1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5104
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.trustmoni.Launtywallet/databases/http_auth.db
- Size 20KB
- SHA256 e54dd1b963b06ed82b4aabf9fe03404e06ed1f2e511be949553f39535d59bab4
- MD5 df11fb20a99697a591d5b82315f43b16
- SHA1 8d20df8344a44902f467150dea59c83613406690
- SHA512 10c13f47c0472037d3fed766825fc54c52ac12d9b69763eb1bd1fcd509ad613b99e09dcea4dfc17f57fbed0134106e4d2a1a5362587daaf6aae70e13b6a608cc
- SSDEEP 12:TLyKEwwR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPbAVOw:TLy9wwRV6/MmXNZ6V2GSE
- TLSH T1B492F1C3B7745312C0086272C8D193C09FF5DA6F462AF78314F410547C43588B8B0CDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.trustmoni.Launtywallet/databases/http_auth.db-journal
- Size 512B
- SHA256 a28bbb6db11db739d66e64618bfacbf4b6892feb6d0ac6c62087f5a1edb4193e
- MD5 b587f12b66022fcbefe51b52c31c93e0
- SHA1 5c77247787273e84e973f6e3b461fb10549c5a09
- SHA512 32427340770560d6e98917d9c3e2449578273813d7603bc1019e93a8135bd8dc782baec66fa3a9d302425f003628e75b17d1f17991b54c7bc49f4114ae28940f
- MD5 SHA1 SHA512
- Path /data/data/com.trustmoni.Launtywallet/databases/http_auth.db-journal
- Size 8KB
- SHA256 86fbe5dbbe5a647cb4996e562951b3d00a94be0539961377ece16513d65035de
- MD5 fa7cc29b1d5c5de43cd2bf8d9c11da8c
- SHA1 129c5abc7fbea3afc7cb8e8a190b1566194758bf
- SHA512 fd8e41833ebdb93ac40dd954e369d1c41a1f3c46f040472e16b1f3c1dbd5fb4da4669d70bf47663af71aa8b14ed7fa39afc7541c4f8c3e60b4f73eb7be2fd503
- SSDEEP 6:7+/l95On1Blfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKE5:7+tIfqLiuWdwRmBEyPbf
- TLSH T12D0222AD6B800923C81916F798D483C00D10E71B81A2CB8B1A600C983C834CCA4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.trustmoni.Launtywallet/databases/http_auth.db-journal
- Size 8KB
- SHA256 3af77664159d6fdc3fc3c6486b8222a91f13fbc2ba749273b08ddf321acf7a5f
- MD5 8a9a8b932e94e55ce78afdef0b33897b
- SHA1 f8d83e52817a8f75e33fefa5c95b0b1ab0f091e5
- SHA512 f2bd8c89ff4ed2e4d17ed0d0fb9351c1ac4c6183913420e7b621c86b977ed0c7b05c34417e760cbf85acdb67fe5456399efbf130a5d2bd94cab3dae84bc72302
- SSDEEP 6:7+/l9MOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKSJ/0n:7+tCiqLJdTRmBEyPbr0n
- TLSH T1BE02228963C10813C01D1BB790C8C3402E10AB148223CB07157008987C066CCAC90D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.trustmoni.Launtywallet/databases/http_auth.db-journal
- Size 12KB
- SHA256 fe1597a2d4d5e43f68bb6dbe712deb0d5fda090d78e8181ea73605ff7d4ea209
- MD5 69e16249c7bde423073f937695872dff
- SHA1 e3e44d68b8af35a42413090733e95bb10a309ff1
- SHA512 719b1d68b69f740fd66124b0508eab1a5f3b02ee1d0a7eb3db0ce19f1d8606ba1e5485cbaf0d11c2d5ede8893c0435e45906b3014d0dcbecbe9a8618cf3882d1
- SSDEEP 12:7+tXf9fqLm6wR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPb6:7+ttqL7wRV6/MmXNZ6V2GS6
- TLSH T16242ABC3BBA80722C40962B2C8E10380ADB5DA6E476ABB9304B801587C43AC9B0F0CD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.trustmoni.Launtywallet/files/profileInstalled
- Size 24B
- SHA256 114f84f1b7a0451fe946dfab600e72ca0de36717eb55799c5dd876025a62b6c7
- MD5 f2254cb3f714382abf069627d14a293d
- SHA1 61f13ffc06df67bebe823f4a1772511394a7b426
- SHA512 b9c00d290fb6507eda81cb7bfec1b2dcc2bd7eb9d88693879bb5cd4df2dd0234894dfd8697e45eb480caab25cecf373fe4c01e8c5bc1545155f5699d9746a49e
- MD5 SHA1 SHA512