Analysis
- max time kernel
77s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 18:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Hercules898_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hercules898_0.0.1.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Hercules898_0.0.1.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Hercules898_0.0.1.apk
- Size 5.4MB
- Sample260831-w2ql8syble
- SHA256 127776f029dec66de56315239258f6068eb22a3357a515b1b8ad631c68b7ffc8
- MD5 00e439be41139ca880acf6696f026ab8
- SHA1 88bdb2aaaeacfbb4792e771c32026b1022f53e15
- SHA512 4d09049e871092b9cf0e577e89876682cca0824cabdd4d63f665a66611825faf13d0b7fd98983a7447819ee4983e2f5baa799754efff7b66d0c41d11ed9f1326
- SSDEEP 98304:R/zeWtGtOVSut6KsNgwiJIULbdyROw7ptpppWz+s33muQQ2c9N42dvQoTYrFy:R/poczPIWZyow7p/s51N4GH
- TLSH T1504601C7F7D8992FC87710B2C9AE52B166478D028A839F436D44361C687B6E41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentHercules898 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentHercules898 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentHercules898 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentHercules898
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentHercules898/files/profileInstalled
- Size 24B
- SHA256 1bfc1c8de0e1287579d95d0063ac7b6b474fd25ce949d09c76b98aef32bae3ef
- MD5 deecbc6c3ae8517c28e1c937bd8a757f
- SHA1 dedd3bbdca0cf440f673b47b9a08417985be4a5c
- SHA512 325b1bcea85d53649a3805b592d6a3a637114d31c435654a3f4e07d93966be1e37f2bf6ebc92bd2cf8be8fb7b7b5c3c76af62f2ea41eedb12d003d3109e98934
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentHercules898/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 1a57ab562e93164f2188104fd10bab4467b1dd19b7bc358ae6741442bf109e4e
- MD5 c0c1bec3d33fd0a5c514eb3230d5e7ba
- SHA1 6e0a2c398916536f5426c5c4438c09c89217bb6a
- SHA512 a9b7d2f564d450f53c91e9c33f3cee3537ab22d1512cacb0e23724f0b074e4705d6d8f0ee0b0a8644ec427f09bc8165c3a36ed6e98d7fab2e865149cd547ac9c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentHercules898/primary.prof
- Size 2KB
- SHA256 9fe64610116ed89890e5bed8bcc9712e867eafa9dbef62224eb61c77d775501b
- MD5 d2f90941f21054ec9848adce9ec419a3
- SHA1 603fa853af265fac5b60f585507bfcc36b6452fb
- SHA512 ab06934a62a1d9c601fb521a9a4b63eb3c97a2cf307b98f25a2ffc9a7ee2cb4ffd276d27fd615787b98ea4dc91b133d18565ccc554dc9873535b85a86d4afc2f
- TLSH T1DA512A9F0345977252352E7A6845B4AE21E13F18D7FA201E36A4BD4A849BE35803DB25
- MD5 SHA1 SHA512 TLSH