Analysis
- max time kernel
149s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/08/2026, 23:53
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Isaac1.42.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Isaac1.42.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Isaac1.42.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Isaac1.42.apk
- Size 69.6MB
- Sample260830-3xp88st1gx
- SHA256 933a17e70d3c5a26e2c3289792570aec1b1a3537e55cf8d3b6f27b2c654a3400
- MD5 c9688d64f2fb71140ec4560d3b772d99
- SHA1 ffa28417c4c440d2afc3f81f244ff0a94d74f14c
- SHA512 f3c08c8890973ffafb33df8a45c0f2a087181629f295a6d1754a2baf69c2d4e5582b74a8d4c579edfbf032fc4901ae8ea881582ece7879e7c5a514ba7a3d3fb2
- SSDEEP 1572864:zYWmuJ0g+S3M1bhBzEOIrCKJG4yQKHsVYGMHrKfYPjf9/CwmCA:zYGJ0g+Sc9zE3rjJ7HKHsmGeFdVpA
- TLSH T15AF73396E4C35A89D439A6324EC24C08175EFD2D26508A0F6B2EFD55AB337107EE835F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.isaac.port - Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 10 pastebin.com 11 pastebin.com - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.isaac.port - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.isaac.port - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.isaac.port - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.isaac.port