Analysis
- max time kernel
144s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
31/08/2026, 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 33.8MB
- Sample260831-wpsaashh49
- SHA256 4ec31392aa9489108763a3cf775ff602867bf222fdbf928e3662134666b40695
- MD5 bc1ad25b0526a4fd032e0728cd53164f
- SHA1 820c8db38cb92a37dc2242a414059d238b4f3033
- SHA512 46c9ecfc0367468a01b0a541a5e27ed21d2019f9e9b044f40c5001e57deb941597d1e9571411add486915013c79480379681fd0921386d2e1856a11929508da1
- SSDEEP 786432:aenLTImrTacf9zpX8wlHxN5JhqmlpxDKFKhArFN2c6:HnfIRI5Jhqmlz1mv2c6
- TLSH T151773382B3A4482FFD3719746B1B4560C2566E836662D3C7F4A5BBBC38375C44F84AE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.coupang.seller - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.coupang.seller - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.coupang.seller - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.coupang.seller - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.coupang.seller
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.coupang.seller/files/profileInstalled
- Size 24B
- SHA256 768aa60ec802fd89ffe8fead9d7350aecca3a9d169715cbe4a48e962ab1d2d21
- MD5 b2f9616d96a33de23144827c4b3b04be
- SHA1 f55884b852b85b41ae8ce34bf0d736021eed88b2
- SHA512 881639af38b1bd5a9d67526a2c55877254f5dcb8a3472e290743a7ffe9e5034e65c31d1631919d4c70cf15d62489494a335054ca83a604e5a2de19b1b53eb4d5
- MD5 SHA1 SHA512
- Path /data/data/com.coupang.seller/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 7c9feceb6894cb9d49958b5c9a094330ef779449d6161874d83077f4107a7a4b
- MD5 bd2dc433e0900ed51fa81683f4fa4c1e
- SHA1 e133ed0f9f75353f6efe01c4e593865b678e6ad2
- SHA512 9cf5471e517e7cfabecaa89cbfe8069363ded45f6814e3c166eff7767d6ac3e55ef2cff1f336760ac2a412952dd35480c4a1b304e61045adf0d6c4c5484ccf0d
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.coupang.seller/primary.prof
- Size 2KB
- SHA256 7251de64ff4ae621a47d08b05d17b9bf298218a1891996e263a8a88214334007
- MD5 ba3083bcc32c6511fe2e9c5de5250de8
- SHA1 0ffe61024f2bf4b07cf854b4a1422d2c862adc01
- SHA512 2ddfd713d4c50e379fb8d31099ee55d3ce45cc28e025b19ebfab9a8753ecbb35acd20b792f436a5ff5c9a1297e49e9f7d2bcfe8761c32634f827163a134aeb2a
- TLSH T1F041FACA0A6D264D9117817CBAD84770697EB0DCCD3B0126B477050EADB952063E1712
- MD5 SHA1 SHA512 TLSH