Analysis
- max time kernel
52s - max time network
65s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/09/2026, 04:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CBT SOJI v4.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
CBT SOJI v4.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
CBT SOJI v4.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target CBT SOJI v4.apk
- Size 7.0MB
- Sample260905-e6jk2sttgt
- SHA256 1687b62dc86861eb03254090bd8ded4ef5d46d45c25038447b6179e76a664f79
- MD5 a9d31df7cae4bd0dba07d64614e0b7cf
- SHA1 a0ae4be8d8acdf975388076361f681305bb4db32
- SHA512 b05417f2ced79d4fdeb3fd081ecb0c99a73e9faac76a7cf6905fd65ca2191826ec883020e87c544149d1b730e6e2287e176b58e09086a08898638666937d0bf6
- SSDEEP 98304:sC0XCkfO1Tt0r6PVwnZd9D5dqEu0BHDU2pk8/3kOVhrCyS+5mhMXX3PHgflhC:dzVwRD5dU0BjPO+UK4y9EMn3PHgflg
- TLSH T1C4760199F758AA2FC4771433457E6231568B8C128E839B83A95C320C6DBB5D40F9EFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.sman1soreang.cbtsman1soreang - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sman1soreang.cbtsman1soreang - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sman1soreang.cbtsman1soreang - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.sman1soreang.cbtsman1soreang - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.sman1soreang.cbtsman1soreang
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.sman1soreang.cbtsman1soreang/files/profileInstalled
- Size 24B
- SHA256 a2fea38e03cc0245bd39b084b4fa4fecd2594a7205750163178d885f0d5b21c4
- MD5 136814984352cf2b7832c13592d73d56
- SHA1 a83fccd315ad7a8a5336e54460f0d1fa03ca65d6
- SHA512 0cddddcd54d03e6eaa6da1844ce26a9430afcecf9866ba7f6755cec86f8c33832bf876906dea898836c8a8a5c009bad95b1779b7d466821db2127c33863ad7c3
- MD5 SHA1 SHA512