Resubmissions

12/08/2026, 12:27

260812-pm4f8awhma7

12/08/2026, 10:42

260812-mrpshseq6v7

Analysis

  • user interaction
    yes
  • max time kernel
    22s
  • max time network
    31s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    12/08/2026, 10:42

General

  • Target
    Liputhsl_HSL_Fakelippu.apk
  • Size 5.9MB
  • Sample260812-mrpshseq6v
  • SHA256 3406861c6aa59a0fcdf997bde36f38adbacb622e743726571d2aa4c64c75b5e7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.krrpbay
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5070

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.krrpbay/files/INSTALLATION
        • Size 36B
        • SHA256 b921e352bbb393a02e20a4821af8152a3521c2905f22b067d5fec0f4ff2bfd31
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.krrpbay/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 145626e788b7cba066f4c346f0df6fbf1ed66d142eff3aae8c70eb1cbd2d2cd4
        • MD5 SHA1 SHA512 TLSH

        splashpage.json

        • Path /data/data/co.median.android.krrpbay/files/gonative-config/splashpage.json
        • Size 3KB
        • SHA256 8bf9c67638c5ecac8a5f69d8961dffbb65f87d7bf1506ddf9136957e86cd4403
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.krrpbay/files/profileInstalled
        • Size 24B
        • SHA256 a1ef3fb2ca6b1d1f61e448d7674bf6e86d374bf0b01b086f069fb9e80c9a486f
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.krrpbay/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ad64df5290e0619f0f1336e8d60a0fed67b23a6333f5b1fd4da0661371752cec
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.krrpbay/primary.prof
        • Size 2KB
        • SHA256 3370839d6cb91647e1a141eae856156b9b2663e9fbae1029738a146b72960102
        • MD5 SHA1 SHA512 TLSH