Analysis
- max time kernel
47s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
20/08/2026, 16:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HexCascade-alpha.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HexCascade-alpha.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
HexCascade-alpha.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target HexCascade-alpha.apk
- Size 14.1MB
- Sample260820-trd5ca1bqf
- SHA256 bfdc1cce661d69f4a1dbb833d6273e628717b4e9e3ffdea5ca656e9d95107658
- MD5 38a806ba61570919c102683101664607
- SHA1 af20be62597615b3b61a36d78132ecdb4273dd0d
- SHA512 6544ed967d96cf07d375162669693602cebb86b1cd6c6306943972156ec891faeddd9812065c82444baf8ae6349cceaa44154ac0926881c1b4d90a1ffcc0f65d
- SSDEEP 393216:vXDrOV32qbRtzbxbyoybe8gcEI+Xv+nOiosXf:vXDr0j3Ioue8Fuv01P
- TLSH T15BE62212EBF8AD6FC433803A9ADB533620464F26DA02E3878A14775D78B77D64E187D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.scungillistudios.hexcascade - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.scungillistudios.hexcascade - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.scungillistudios.hexcascade - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.scungillistudios.hexcascade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.scungillistudios.hexcascade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.scungillistudios.hexcascade/files/profileInstalled
- Size 24B
- SHA256 efbc5a2f4e09ea655a186291b5d70e466cff2c58608f6e9a56ab33ef94abfc8a
- MD5 bfdc5bb98a774be6e8bfba0887dadc15
- SHA1 5a2ab3daa07940cef0a52a2065cd6d58f4b3a807
- SHA512 1dc2a1ecc90e8ac8a3daaf65a1e2a74652f5a7e0b6a4a7bd56a7e477e7ca6d71c01cb09b04b11a8861ec195c8e74e1e798b8edf1375bf6f9ec5543505b6b0d2f
- MD5 SHA1 SHA512
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 3fddb01df4e7e28a3ab50135b1cb5e4ec9b526d8402d11acdc1caf28fbf7aabf
- MD5 a9a782272042719e249fea13cd1fb19a
- SHA1 a3ca6ab58dd4d4b6e4b9461d907ac5ac00bf5924
- SHA512 6c4baa9bdb2754d6bc887851792c7503f377544d4634d21a49e85743fa6aaab9c7fe2c62cb4b33e4b18a7f76e673b4d04c132bef398da3bd4912bd2f0cbfa3f0
- MD5 SHA1 SHA512
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 2ae20b61356567230a1e19e0243c9f4146a2fff59990581492f9f8cf41cdd855
- MD5 a6aa7b2c19c07038cffff9d1a3efa562
- SHA1 15550c5d3a4f80220164fdcd0aebbcf76f420ef0
- SHA512 848645fa650bd38e68ac48099441aa1028139f6b5b3b85ac3443265b22c1baf108536b18cbebabfbdaab1c017843bce72943f271d8209d19e1f2b9204c2efbc7
- SSDEEP 6:KgSoAZHWcSoJg2vg9FZdrlOERX4PBX4ogLugMBX4suuK+/KSotKktY7dtDolQ7xG:K1ScSig2yzdTRmBEyPbP/PWtel15Ow2
- TLSH T1AF72C2C4538009A3CB294376E487D3462E70671E7372CB675D910593FCC26AC9490D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 5023f6f3e734ca31a1fbfc42e24b28c2e0914deb0eadee65fc6a974a8ecf4c2d
- MD5 bec93b8681acc673b777d8e8a9fe59f4
- SHA1 0d63938377965156b47789fb0a8d2a5c40e6e82b
- SHA512 01881ea78401b8c0a0e369fa773f913438d85456a7b7e19c9474028a1f43c33f592620c07d02b92aa6bc2df4e9ac908e38e682503f80c8ea46e5c2283baf1869
- SSDEEP 96:2d6+hdjnHtDRMpf8UzS6+BD8q0ExP3HIWuN2ZldjCmLfDYkSYOVA:idjnHt9Mpf8UzS6+BD8q0E5B5
- TLSH T128B3024E0F192580C5A964F0E5910FA17D3E412EE7A3E3F5AD910076EEC6920DE29CFA
- MD5 SHA1 SHA512 SSDEEP TLSH