Analysis
- max time kernel
26s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
31/08/2026, 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
toumeigu.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
toumeigu.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
toumeigu.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target toumeigu.apk
- Size 3.0MB
- Sample260831-wp2tqsdr7w
- SHA256 b088f26923045e8396fb11c3914cc6dab182fe1dc895e4ae3cb32a509809931c
- MD5 05e58e1ccf24cffc18852c0c2c2fc2e1
- SHA1 2ae765ad2ea047fbdb561eb20efeb9cfa6d77b0a
- SHA512 cfdec18eedd68a707ed441758ed7ede833a6fab19575210f3172e4b13bffe56e288ba1c1b8f9b1ae0a659e3a5f81e4bf8438dbf8774065b1408ffb18d25d0dd9
- SSDEEP 98304:yjwwt+F3rcle2kJKiAorrndi77Eb8Sot9qKB:yjT6clnKt5i772Vy1
- TLSH T145E50182FBE62D2ECC3B45364F9B1A7156169E03C993D70B89A4362C2C376C84F65BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.usmarket.trade - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.usmarket.trade - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.usmarket.trade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.usmarket.trade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.usmarket.trade/files/profileInstalled
- Size 24B
- SHA256 59fa8216e80ad17fc539bb9ee6f14255c633296b025eb3975882ba8fe17d94a0
- MD5 bc2bb1c0e5f4f9255f70055502f7cc93
- SHA1 fb3af2579b4e65fe59d2c68a78f05d499f3d1c5f
- SHA512 1be7129c6b0c2460cfcf3d16d8fb204d2313e1589e9ee5f144278f109607053eb0273ae8904876ddb00103d85d13f8607181bb319e9ff41a092031586aa64029
- MD5 SHA1 SHA512
- Path /data/data/com.usmarket.trade/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b318c3a1ae0b56a87e8f155294ce9ffc4ad8a210b3da767c991893ae79be768f
- MD5 555cf91f85ae63f86a2b504abf348ba6
- SHA1 1662047b0d3aa8be79874d6677815c090f294771
- SHA512 d0cfcaafb80ab48dbd1ef1de459620941d1cc1a8dda97fd94b7562adf21dbba0a4580f44ce47e9fd8995fccce89cb72aba8d61057747deabf62c41da3ecbf1e4
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.usmarket.trade/primary.prof
- Size 2KB
- SHA256 327dadd8d837bfc4a8495b09d327c2e948bd46dd07d236cc9fb22b773bfa30c5
- MD5 453f132996de2689d4170f2ad10738d4
- SHA1 54b81a027674e87e6563f775c50828e1817db0ed
- SHA512 338a4c15b6bcdc0c3c119303b49388b9850c60fddd64498e8071d3c0e7375289db16bf91b047cbfb1ae42dcb6ca37dcc5ba005fb96af92acd98b00c08e5fd441
- TLSH T154512DFAD795013E8D76D3D4C0C6475597D08A1518F6F4C57208771386CB2F66AC878A
- MD5 SHA1 SHA512 TLSH