Analysis
- max time kernel
141s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
03/09/2026, 12:30
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 3.9MB
- Sample260903-ppwt6axaqe
- SHA256 63d7074618dc4a26152e38b39e66b6f94944d8c726b7bd16f2f452b9c4e208ed
- MD5 e62493069d58966b1a56f4b67fed06a3
- SHA1 1b8b75a36d906920241213c45f08bc2eb5b7d89d
- SHA512 d092916018f3ed4aea4e04b3d0baa0dcb76c19b32d76ef44223be8ae0ad225572a9b3aefea65493c2731c13d141b4818244e5d06a8f8d86162ce6fa595b59a0d
- SSDEEP 49152:R7Vcja43bdJDUsh1fan3w7qKQz6MxxRgVguX//aEqr9fm3RRtAMHcA2cIH9fE69U:1epDxmw76OA89XPqPa
- TLSH T190166FAECE6D6825DA54AF35005B0AEBD21903411642F73F0E78A9A43C8BDD86D53D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.kqsndwljly.eealkkttgo - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.kqsndwljly.eealkkttgo - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kqsndwljly.eealkkttgo