Analysis
- max time kernel
33s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/08/2026, 14:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LOEN-Android-v1.0.0.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
LOEN-Android-v1.0.0.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
LOEN-Android-v1.0.0.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target LOEN-Android-v1.0.0.apk
- Size 76KB
- Sample260819-rr9j5sysdy
- SHA256 247579c5473aac03ac3e4a26ece0ccded8580d3ac06a54130e51343ddbd125bd
- MD5 9a9cb41db9e24f7becccaa968e2d1287
- SHA1 edfd0e2a0f09d7d8292a1410f67e92082efac866
- SHA512 821d7477df914c2ec5abcd6e24b68e85b9caa997207459ed967b5a453163b708e668dbbcdcefd12fbf87ff01cb1d8535fa4b42412104c929ccf61a2064ee4ad4
- SSDEEP 1536:BZd34xE6TlC4rMgOpIm6x7OAmoEsrhno27RdfpvulQN:aC6g40pMRTmWrhnoQdR
- TLSH T14A73029B6F946A69ECA7E2B183E90BF63F90D34C225D6B132208C0CD3E1C5D16C616D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.loen.supplychain - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.loen.supplychain - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.loen.supplychain - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.loen.supplychain - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.loen.supplychain