Analysis
- max time kernel
131s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
16/08/2026, 20:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Musika-1.7.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Musika-1.7.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Musika-1.7.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Musika-1.7.apk
- Size 6.4MB
- Sample260816-y698jsfg28
- SHA256 e302de7ff527b2c71cca63b0c73d5137dfdd801a643b09a8a4546a89a3e0fb90
- MD5 7367405350c6e7adbbf08b067fc72547
- SHA1 0f9d5ba3151241c86665e1ab97d2aaac50e5c518
- SHA512 e2c3c4c9b64e02724654ff0a196dbc39486a62af9db551677e9fa766acf1de70331f68c00ecc64d40b9fd7234c97bdfeaf271e12f8e3fba5cb06a98aff12e148
- SSDEEP 196608:oV8LJXrMmSlbkYf7/+HZ5tec9xft4NuBZV/4:FXK4aq3NVZN4
- TLSH T188660192E7F8AA1EC473C0329AAB533665880D11DA46D3474718F37C6CF7AE09E85BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ken.musika - Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 11 ipapi.co 12 ipapi.co - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ken.musika - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ken.musika - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ken.musika - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ken.musika
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ken.musika/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 01f82c9e953192830da81557b864b96455189c22f3397e969a357d3813e47c56
- MD5 26b8fe27b490efb63ea78979a02145f5
- SHA1 be5d36663ab3d30a71d67726caebf61450282013
- SHA512 0d9c84714ce1afc33b3f8dff5af6b4f757d3ca31bd5abf8fd2b97f087c6bbd60733c3842292a73e2cf2a5d965c54b0c1cb7459e7e09a90ec9858283176daa081
- SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSM:8MEX0wIyNjaM
- TLSH T18D43639D5E2C2221C97E283ED7E243635B7C93DF5723926239E08CF98DC206974358A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ken.musika/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 6574514189700340bb67357a3a7f51f5545290841ef96bd63260e05c9a2f1276
- MD5 ca6ec688705abf8c704234c1ce369169
- SHA1 39dcbed3e9c23ac653f368b7bee94f910694d57b
- SHA512 471cc14f32c7658fc00f18b5733784834bf271cbb131216d222ce7998cb1ce743102dcc4bb9f0e99eceace7d092f82376f6df356a25fda672df45122e3520c95
- MD5 SHA1 SHA512
- Path /data/data/com.ken.musika/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 bba59eeeaeb357189190049ee612c9219d3d454c34443e068c1f587db9c6edb7
- MD5 80074d0ecec91b3914d3ee394e83d7ac
- SHA1 ed03e9689ad46ebad47275c8d76ec16b16473bf3
- SHA512 1580bd34b72d0272833aee210ce20da2b69d277959c6f30acadfd1f84ea4d63b9992d21a868c78f96bb87482974283917882040833591f504df649c652785a01
- SSDEEP 6:7+/l9FHn1P2vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKf:7+t12vqLiuWdwRmBEyPbA
- TLSH T14C02228A63800822D929DEB790E483A00D00E7198171CF5F156008D87C034CCE8A0E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ken.musika/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6a25e4c500e5e301578da16fc443efc07ad1ccbf790a12ff3b3a4896cf75fa63
- MD5 c55d84c26347ee5c3ad0f057a75055bf
- SHA1 a602be95c1dc026ee10207106fede426d98e8c5a
- SHA512 e46d8bccd1ffb8c2da109e9beb200a6ce147153dfe246dd9c0432f700e348d6c4966d586a4e3f1c2f48b1e5cd8b9391c29c3514cd87b951bf17603c219f13c7d
- SSDEEP 6:7+/l9yOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKLy//6:7+t/qLJdTRmBEyPbhX6
- TLSH T15B02808A77410913C51D5FB790D983552E50E765C373CB57157008987C476CCE8B4E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ken.musika/files/profileInstalled
- Size 24B
- SHA256 3fddf4f4b91e987807bb2e6385b5849bd48b6760f3f58f6652b79e97fd0f70cc
- MD5 4449eed116e2fe4f067dfcf55ea850b4
- SHA1 a3c5148966b0b3c3d92d4156a21a8ac47883a4c1
- SHA512 21cbd95067ee335e6c7966fb2be239d35f15aef7c86ecf122785a1aa5bda3d3d842c6b58d5afc86d048de4b7b71647d4269afbe23ec467d74c9d8caf7c75b13f
- MD5 SHA1 SHA512