Analysis
- max time kernel
60s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
31/08/2026, 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
toumeigu.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
toumeigu.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
toumeigu.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target toumeigu.apk
- Size 3.0MB
- Sample260831-wp2tqsdr7w
- SHA256 b088f26923045e8396fb11c3914cc6dab182fe1dc895e4ae3cb32a509809931c
- MD5 05e58e1ccf24cffc18852c0c2c2fc2e1
- SHA1 2ae765ad2ea047fbdb561eb20efeb9cfa6d77b0a
- SHA512 cfdec18eedd68a707ed441758ed7ede833a6fab19575210f3172e4b13bffe56e288ba1c1b8f9b1ae0a659e3a5f81e4bf8438dbf8774065b1408ffb18d25d0dd9
- SSDEEP 98304:yjwwt+F3rcle2kJKiAorrndi77Eb8Sot9qKB:yjT6clnKt5i772Vy1
- TLSH T145E50182FBE62D2ECC3B45364F9B1A7156169E03C993D70B89A4362C2C376C84F65BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.usmarket.trade - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.usmarket.trade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.usmarket.trade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.usmarket.trade/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 cd1a825b03d6f7a84534fcef2670a75b6b365364c25a73f927a950900d1ea4ec
- MD5 46c59b6184e1de008273f9d81bbaa901
- SHA1 afc7c60aa276c3e798e69ff2395e0287edc908d6
- SHA512 5bcd83554076381b27559152119c645ecb7eeff7c299bcb6e7ccbfc87686dd29cb527137244cd6d86647a6862a3d7eab3ebbf7a910dc8910893f9236c4a225fd
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.usmarket.trade/primary.prof
- Size 2KB
- SHA256 327dadd8d837bfc4a8495b09d327c2e948bd46dd07d236cc9fb22b773bfa30c5
- MD5 453f132996de2689d4170f2ad10738d4
- SHA1 54b81a027674e87e6563f775c50828e1817db0ed
- SHA512 338a4c15b6bcdc0c3c119303b49388b9850c60fddd64498e8071d3c0e7375289db16bf91b047cbfb1ae42dcb6ca37dcc5ba005fb96af92acd98b00c08e5fd441
- TLSH T154512DFAD795013E8D76D3D4C0C6475597D08A1518F6F4C57208771386CB2F66AC878A
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.usmarket.trade/primary.prof
- Size 5KB
- SHA256 9c8d618d7be0de5fec90a19ce3f3e1a1675eb79a792dd1d1bb6b63a80e4ab27b
- MD5 569b762117b080e973ecb1b173c338cb
- SHA1 7b274c555c31c8c94164e02eafc8a3eaa6779ccf
- SHA512 ca8bb3fc6967f04ef2382d320774fae3f10c29364548121896cac177b759dbe9a905548c51ea0a024a9458519daa169aec5d461bc238002c3e0671a0d34d0702
- SSDEEP 96:cLE/mdZYC04tZz2cZ0kll6tgt33DA2QK1fPRvTAvWmn:HMZY14brZ0kll6tgt3ztQK1fJt8
- TLSH T173B15DD745D2AFB8C121DBA780A0767C27B6EA4A033FF1E9496406F0E322975DC5136B
- MD5 SHA1 SHA512 SSDEEP TLSH