Analysis
- max time kernel
24s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
toumeigu.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
toumeigu.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
toumeigu.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target toumeigu.apk
- Size 3.0MB
- Sample260831-wp2tqsdr7w
- SHA256 b088f26923045e8396fb11c3914cc6dab182fe1dc895e4ae3cb32a509809931c
- MD5 05e58e1ccf24cffc18852c0c2c2fc2e1
- SHA1 2ae765ad2ea047fbdb561eb20efeb9cfa6d77b0a
- SHA512 cfdec18eedd68a707ed441758ed7ede833a6fab19575210f3172e4b13bffe56e288ba1c1b8f9b1ae0a659e3a5f81e4bf8438dbf8774065b1408ffb18d25d0dd9
- SSDEEP 98304:yjwwt+F3rcle2kJKiAorrndi77Eb8Sot9qKB:yjT6clnKt5i772Vy1
- TLSH T145E50182FBE62D2ECC3B45364F9B1A7156169E03C993D70B89A4362C2C376C84F65BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.usmarket.trade - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.usmarket.trade - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.usmarket.trade - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.usmarket.trade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.usmarket.trade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.usmarket.trade/files/profileInstalled
- Size 24B
- SHA256 cc6fe2f63aed5b8754e58974cbc0c1842adfcdd2368c738d48de339a917e311a
- MD5 e9b6210079c7af57c96320c6ca39ebf5
- SHA1 d0f7655593e3cfcdd109a18277471a40933626f0
- SHA512 c35cdbe0d6ccab4932bda5a41ce72d23c036c8d638abf7a2def9101a4be26ce10d75d6ef2ae65fe2311b1f6d6b2923bb35dda12ad5cd17d7aedd941dc53d7205
- MD5 SHA1 SHA512
- Path /data/data/com.usmarket.trade/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 ab36f502282a6f4fd0097ff68b7ad5d1ff8038246226239ba28eeaa2b8bb62fa
- MD5 a1791266d1ca0e9064f5db642ac15d02
- SHA1 e0cf5951a053882be4726584dbf960e62e179a37
- SHA512 4c24aa016697ab6b0168fd80557f17d62b5843ce3756b5dcf2f9b585ad511213eb4ccf1fbb94617f8ee4d02c45f09689c9fe89b00870ab4e2f53d411c4bc00df
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.usmarket.trade/primary.prof
- Size 2KB
- SHA256 327dadd8d837bfc4a8495b09d327c2e948bd46dd07d236cc9fb22b773bfa30c5
- MD5 453f132996de2689d4170f2ad10738d4
- SHA1 54b81a027674e87e6563f775c50828e1817db0ed
- SHA512 338a4c15b6bcdc0c3c119303b49388b9850c60fddd64498e8071d3c0e7375289db16bf91b047cbfb1ae42dcb6ca37dcc5ba005fb96af92acd98b00c08e5fd441
- TLSH T154512DFAD795013E8D76D3D4C0C6475597D08A1518F6F4C57208771386CB2F66AC878A
- MD5 SHA1 SHA512 TLSH