Analysis

  • max time kernel
    74s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    16/08/2026, 00:11

General

  • Target
    OgaVerify.apk
  • Size 5.9MB
  • Sample260816-agzhrawdle
  • SHA256 49c16785567f8144edceafe7ce90bf9dcce7d078db7c23521fefb49b38f98404
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.mbbnleb
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5085

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.mbbnleb/files/INSTALLATION
        • Size 36B
        • SHA256 6f40e5d9ac4a1d1245d1d67c44ca25696f1bd3092a97ed60203cdb45a7717948
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.mbbnleb/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 57682b02b3c053ae381e3ab9c90789cee43d7dd15a0cbd7c115490a6db81c218
        • MD5 SHA1 SHA512 TLSH

        splashpage.json

        • Path /data/data/co.median.android.mbbnleb/files/gonative-config/splashpage.json
        • Size 3KB
        • SHA256 4dc469841e5bace04a2283f47f7d50f3c35205704188a60d4f54b0755ecfb529
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.mbbnleb/files/profileInstalled
        • Size 24B
        • SHA256 db725be0542af2593676550268fbed8b7c5d965fedde082f7403b38b21ff4186
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.mbbnleb/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ce73183031270666df2840915948a2923889c969b5e76ee07e5769800d8bc794
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.mbbnleb/primary.prof
        • Size 1KB
        • SHA256 34031638c9417f0b1d7f7b23a905bbec630f2f95f96aa256be4a480175f60da9
        • MD5 SHA1 SHA512 TLSH