Analysis
- max time kernel
33s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
20/08/2026, 16:17
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Alshams.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Alshams.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Alshams.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Alshams.apk
- Size 146KB
- Sample260820-trdhta1bqe
- SHA256 4e0f65a179291da713018b1f6595884968ba2b99a9dbe0a0d763daa03273f441
- MD5 5dbd2ff5eb9b85c7ca734e33f2f78a14
- SHA1 fc3bb7eefe10c389ddee1fc354486b2c9121195e
- SHA512 70f3f8e567be3113bab3c048e6dcfaeb21d4c367f6d81ef0f2e8d7237eeb2f1c5c317de5ae105b057b07dd73a914a96aabb56a8680f89898c8e35d3276e9da18
- SSDEEP 3072:pG1FBZNJfZGmB9TF4+MvTQE6AMsQwwGcWA5pqVK+JsN:pG1FXNJfZGmB9JCLMnw4UEcsN
- TLSH T16BE313A112336D23CF656672EEE856982CF9B278B75C268A10FC1D4B9204B036514FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener alshamscompany.com.alshams - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo alshamscompany.com.alshams - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone alshamscompany.com.alshams - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver alshamscompany.com.alshams - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo alshamscompany.com.alshams - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo alshamscompany.com.alshams
Processes
-
alshamscompany.com.alshams1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5101