Analysis
- max time kernel
149s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
20/08/2026, 16:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HexCascade-alpha.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HexCascade-alpha.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
HexCascade-alpha.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target HexCascade-alpha.apk
- Size 14.1MB
- Sample260820-trd5ca1bqf
- SHA256 bfdc1cce661d69f4a1dbb833d6273e628717b4e9e3ffdea5ca656e9d95107658
- MD5 38a806ba61570919c102683101664607
- SHA1 af20be62597615b3b61a36d78132ecdb4273dd0d
- SHA512 6544ed967d96cf07d375162669693602cebb86b1cd6c6306943972156ec891faeddd9812065c82444baf8ae6349cceaa44154ac0926881c1b4d90a1ffcc0f65d
- SSDEEP 393216:vXDrOV32qbRtzbxbyoybe8gcEI+Xv+nOiosXf:vXDr0j3Ioue8Fuv01P
- TLSH T15BE62212EBF8AD6FC433803A9ADB533620464F26DA02E3878A14775D78B77D64E187D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.scungillistudios.hexcascade - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.scungillistudios.hexcascade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.scungillistudios.hexcascade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 d3c122327b6b5d482456870a5f883c6dbd7b8c7994cd68f141f1c0d435ec29ec
- MD5 9bfa9d8cc565b128381515b7628f782d
- SHA1 7dcd42b01dcc0a1a1ca982bf79cfdeaffb09f9f7
- SHA512 6249587890fcc4d2f2aeff89370ac28adad44a852b7f91710fe3109f7e3116decf3f91bdd0da0cd35e10e43f8e2664adbff8cddb128cdbc101a5edda9964ab98
- MD5 SHA1 SHA512
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 13cc5b9ba85b063ed8785a601bbec4996ea52f3b04b91b731014ad03beec80b6
- MD5 cb39a4608a4f6793e13ce677f1960d5f
- SHA1 5250b58b2eb682d731c36021f29be164d18c1bc0
- SHA512 03a5cda29fa32ac5f41fc12b61abb2c720331efd88f6f66157b6692edada40b4406add868aa79a050a777d9e35ffc77ad1b571fd27d2e6780e23f7a7e3a6c5d5
- SSDEEP 6:K011U4Ty9FZde/kPlOERX4PBX4ogLugMBX4suuK+/t8whlWOw2:K0/l8zdeWRmBEyPbP/ewvWOw2
- TLSH T1C272C26597C98D6BC0E54B3290C6C3640D133A685B62CB0BD2C224547CC17CCF3B0F08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.scungillistudios.hexcascade/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 41b75adfd2d867f42190770fd84c67333407fc8c675a52f5916413d5e1124d8d
- MD5 72d6babddb14e6576c6d87374edb181f
- SHA1 95792b7f30f2eb80d7319f09b64de5b18fb36462
- SHA512 979a8c583aa11af171e7f46d48bf06e3dda6aa8794de30ec9922ee212fb5f444c57dc5205e5c846efa345ba5087d1d42a0f27625724dc3dac6f941f617071f13
- SSDEEP 96:A6+hdjnHtDRMpf8UzS6+BD8q0ExPlzffR:kdjnHt9Mpf8UzS6+BD8q0E5xfJ
- TLSH T150B30D8E0F1D2944C4D9A8F0A1900FF1793F512E9793E3E6A5914075BEC2920EA39DFA
- MD5 SHA1 SHA512 SSDEEP TLSH