Analysis
- max time kernel
22s - max time network
65s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
25/08/2026, 16:03
Static task
static1
Behavioral task
behavioral1
Sample
17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
Resource
android-35-x64-arm64-20260325-en
General
- Target 17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810.apk
- Size 22.4MB
- Sample260825-thrdba11ey
- SHA256 17b71715aba2d00c6791b6c72d275af4fc63d56870abe6035ba70eac03b2e810
- MD5 5e15b25f07020a5314f0068b474fff3d
- SHA1 e18396ecf65969c23bc03911762bcca1553bbadf
- SHA512 afc61670e0a785a1f4952a53fdfe42f0aedbc7d7addad10ea60d79118379fb41f18ff7f0b6ea9fe2a59ad69fbc0a90b276f7b7c05aa1699a8d16257bb5e0df84
- SSDEEP 393216:VWf+p7lTaLIvv+O0+17STVUn/lj+1MTFxs:Yf+pSIv1NSTVUnJ+OJxs
- TLSH T1C737BE4EF90DC422CDEBB1BD7D5E079264223C195BA1C24A2D15721DFBB36D0463ABE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4726 com.app.byteepic /system_ext/framework/androidx.window.sidecar.jar 4726 com.app.byteepic - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.app.byteepic - Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://media/external/images/media com.app.byteepic - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.app.byteepic - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.app.byteepic
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.app.byteepic/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 34516c953004a1bae5d1feddb4dd450dfeaf046355b77db019cd60ec2fbba5ae
- MD5 c0b878440921e995d40b913765eabd36
- SHA1 4b067dcc6356d1f15d954a80daee5349ae3c5c27
- SHA512 d588fa91208971a7717899b3954777838f451c992ea80bfc3ef682769c97b432ebe98f33f4f0bae299d55b7ec427973473e3136f480cc10c53e48287347a1263
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.app.byteepic/primary.prof
- Size 1KB
- SHA256 407e30edbccc689d9666d3bd5c7973d63e0022c76247894e76efa3c7d8fc6414
- MD5 6fb69070788a4105aea07394bb0974f4
- SHA1 490da38dba4c4ca353c39ef3ec5e1b8cb7644dc5
- SHA512 acc433673627a944354cff55e1c5f66b3462071f3c8cb73fbdc07e4d64d0a057ec9e99cae6a8c7f0b037e7782e0ffdd7a7f0540f774e46ec7561d77c16cd6bc8
- TLSH T132310A08E0EB9C01678346A72C59A748EB03D93AA6E7651A8F8A12315D8B401F9F4396
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH