Analysis
- max time kernel
18s - max time network
156s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 18:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Hercules898_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hercules898_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Hercules898_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Hercules898_0.0.1.apk
- Size 5.4MB
- Sample260831-w2bs3saa33
- SHA256 127776f029dec66de56315239258f6068eb22a3357a515b1b8ad631c68b7ffc8
- MD5 00e439be41139ca880acf6696f026ab8
- SHA1 88bdb2aaaeacfbb4792e771c32026b1022f53e15
- SHA512 4d09049e871092b9cf0e577e89876682cca0824cabdd4d63f665a66611825faf13d0b7fd98983a7447819ee4983e2f5baa799754efff7b66d0c41d11ed9f1326
- SSDEEP 98304:R/zeWtGtOVSut6KsNgwiJIULbdyROw7ptpppWz+s33muQQ2c9N42dvQoTYrFy:R/poczPIWZyow7p/s51N4GH
- TLSH T1504601C7F7D8992FC87710B2C9AE52B166478D028A839F436D44361C687B6E41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentHercules898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentHercules898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentHercules898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentHercules898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentHercules898/files/profileInstalled
- Size 24B
- SHA256 332fc873dd93f66d470fb5e90e3e5844a0d6cccd19d95282b580d1a65e6553f0
- MD5 60979c6a9c40fcf236734d5ce8062cc9
- SHA1 e86b22932126592262ee0c36fa9410183f4c3ea4
- SHA512 9041e6fe96d92597771c6d96426e52bc45bfd75c5b3918bdd7e96be76c4831231db471625dec7675c5db85ce32531ad57585b6f0d2bfe9f16921820d6af96189
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentHercules898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 105e00f31deeef2319fbd0fcda7cc7421af1ab42a2647b3e6379ae32b6dcfc07
- MD5 d909a4a5f7464c98fbcf424bdb24efb1
- SHA1 e0bcc1845f3afb36e2d101c3dfec82d38b1b26c0
- SHA512 9301548f379f26eeef6f0733370f1beaa45240060f7e5c4ca725b967622310a7c645754f0b5d88991c210bf9bd3ee0b7b1aef0029f1a67284d946a215dc4106a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentHercules898/primary.prof
- Size 2KB
- SHA256 9fe64610116ed89890e5bed8bcc9712e867eafa9dbef62224eb61c77d775501b
- MD5 d2f90941f21054ec9848adce9ec419a3
- SHA1 603fa853af265fac5b60f585507bfcc36b6452fb
- SHA512 ab06934a62a1d9c601fb521a9a4b63eb3c97a2cf307b98f25a2ffc9a7ee2cb4ffd276d27fd615787b98ea4dc91b133d18565ccc554dc9873535b85a86d4afc2f
- TLSH T1DA512A9F0345977252352E7A6845B4AE21E13F18D7FA201E36A4BD4A849BE35803DB25
- MD5 SHA1 SHA512 TLSH