Analysis
- max time kernel
144s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 00:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
betwinneres.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
betwinneres.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
betwinneres.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target betwinneres.apk
- Size 162KB
- Sample260831-ajf47abp21
- SHA256 5c90eefac764e2bc0c00829f4d5bacf98d9df0f90cf472cc4fbaaf91c4a6a9a3
- MD5 cb888f03316b4383d757bae8263204b0
- SHA1 25dc3773c1b00bc5d1bbdd07b62e94369a7d188c
- SHA512 9a17950fb89bc4a4789f73cfc13d33464cc177cf12c320f4cb4e38504245639b00b5a20eb29f215a9319d10915b763fd746f85f28b1e8fab60efcf49cd51a6b8
- SSDEEP 3072:eezk+yTw/HeFgyCMjRqcSJzGqHXF6Gm0jYbG00bTKQ0BX3QPSINiD3rgM:eezk+ow/HvyCmWzl15jQl0bj0NQPDC3b
- TLSH T15DF312EBDB26DC4DF2AD467CCE51FFE3AC211178C5235704D82A4169688BBD0B914BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.betwinneres.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.betwinneres.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.betwinneres.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.betwinneres.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.betwinneres.app