Analysis
- max time kernel
62s - max time network
156s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
27/08/2026, 00:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
osferapp.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
osferapp.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
osferapp.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target osferapp.apk
- Size 1.0MB
- Sample260827-al49sswtft
- SHA256 177d0eee92f4aeb354e02e3ab7a211853fbb80560cfb0eee5c7f89172200afd8
- MD5 da5815714c6b60da4d1d32e6b45e29fd
- SHA1 ed8e2e4628714063b6e3ce0c033dc24538541877
- SHA512 485ec6040cd57cb951b53244f27e465ba1cafe4e7fa66a05ac16ec979d0328feed841580fbc583df22586f2009b0d8f1df37bdcea90474efe575dbb45c56055f
- SSDEEP 24576:em2ENul9sfByUjjA+1UvHVlaZmhAvbOwTWYRpffbd:em09EyUjEqWgOwTWCbd
- TLSH T1BA358D82FF05E866D5F7C6378376467A56064E194B93E3831A89B23C1DB76C04BC9EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.goyal.website2apk - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.goyal.website2apk - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.goyal.website2apk