Analysis
- max time kernel
46s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 02:05
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
mts.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
mts.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mts.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target mts.apk
- Size 11.9MB
- Sample260831-cjanhstcnf
- SHA256 4d5945fb2ce177a0f8e12489f8b0b4fed528fe060f79543ad8c6a93261b89380
- MD5 e31cfabc7992fbf494581de869305d17
- SHA1 3b73b931cef1dcad46539ca0db210dc0507875dc
- SHA512 b941860a5ab10dbc7b2d383e6dd95d5ea64d455dd3f00f4f33a64980d666203f904a3ed943b301376a4139a0d4f9e08fb6823d5bb199a557a3de5e706b2225de
- SSDEEP 98304:ETXP1gN0u9AETfML7EmMqNo0IS3aKxm53TYC254iFbEjBIMTYrdD:EPKN35Df53TYI+
- TLSH T18BC6AE53EB568C32D2BE5335ACBA831477316D96B7836F431644B4A87CB32C09F992D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener vn.mangu.hal.jw - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone vn.mangu.hal.jw - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver vn.mangu.hal.jw - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo vn.mangu.hal.jw - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo vn.mangu.hal.jw
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/vn.mangu.hal.jw/files/profileInstalled
- Size 24B
- SHA256 172d84fa377d642c92fd76961e7693ac3363b8710fec561cbc8006fc3a90e0a5
- MD5 8c1401e3bd66b3c87451e75624a5b640
- SHA1 ca931a4626a39768675d9aacbe21bb10d87784a9
- SHA512 4a9f6fd21fa3bd99fe7c2f676ff9ba79dfeb76b7b00a5c2721ba6d803c4a75b03b025ac2f0017aedee0b84001e6aca9ed987b3abd646a38ba5e6a80c0adb9a7f
- MD5 SHA1 SHA512
- Path /data/data/vn.mangu.hal.jw/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 1ee94dfd59ed403da1b56900b6b0699c341594391663246914612589278bd68b
- MD5 d4d06e14018c44b9f9fcc14f671e48e7
- SHA1 2b00c93cc6212dea59d2acf788d76033237d9337
- SHA512 05e5b1c3c6062fb6c3679100db171143126e9b78f3e582c9983c312e8a60ad908d964d4734a6019a892ae7420e8467e86c047bbc6f20806edaadf3c99345d3bb
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/vn.mangu.hal.jw/primary.prof
- Size 3KB
- SHA256 fbe74642028a18c149fdeb380fddb77abf4444742abc34fc05e152df0b7c2832
- MD5 62e978a2b419f7a9e9c2988556f3ec8b
- SHA1 c3ca8885e4b807998ad49fa318d8cb30f52c9fcb
- SHA512 e7a24a03d89661719bbbe23756d70fd1712e9c9783faf6e0ed21a511d45e6bb223f572680b7105b8715918ab9797a1b5ac878a974e37dd2f50ac54c8e9340134
- TLSH T14B713A8837913EE896784A5BE14721EE907EB606A53FDE04D836B32D0015C38296B39A
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/vn.mangu.hal.jw/primary.prof
- Size 6KB
- SHA256 cac8ad192c008b060350a34c37c0cda015a43fe91af72513000c6718d3e2fc31
- MD5 77fad35cde3059d30306f4c6de95dbcf
- SHA1 df46404cba47039595a98906fad5698d100ce80f
- SHA512 25f09cb570ccf3e2e5ea9bd7527bdae59cdaf5860360a0b9f3a44f198f995835b1039ca7565dc890343e70c63f880850a2465d3560f45a95174bae5f71e22a29
- SSDEEP 192:BCwt8zpE8ltlN6BRJY8+JXysVOeReCWdw7:Bt+pE8XlN63JYTJxxxWM
- TLSH T12AE18F962611C72FB632274198D3669DDDBF7C76E470A43532D8F1D6ACC104E1794069
- MD5 SHA1 SHA512 SSDEEP TLSH