Analysis
- user interaction
yes - max time kernel
141s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
06/09/2026, 14:29
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Яндекс Фото (4).apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Яндекс Фото (4).apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
Яндекс Фото (4).apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target Яндекс Фото (4).apk
- Size 7.9MB
- Sample260906-rt11sabe89
- SHA256 275e1ddebcacd9be3ea2c7866621dc35b4426907a893c30321a4e6c8d6b3707c
- MD5 953f39a5ac3fd705272feacf7e4c29f4
- SHA1 e24a9233f4cab8ca0f2edb3ce85bf8ad15303a86
- SHA512 c5c0c387ab48d4ebefe056a3c7ee621e120b3429ea4c0f0a11663041d6279f8198c36924afaf49efbe27e034df5cfe15688e995281889c8c3e0f25864692d2e5
- SSDEEP 98304:nGKn3H+Oh39tliFKHda69P8m33mPRb8UykyT59opeQN5H2HtGUoIMofmZR4Pe8wM:F3XNbiO86B8OMfCdvQPHMGi/
- TLSH T145862232BA092822CC668A36C5B30B97B37DC3891713D71F5AB468717CD36D1AF059B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ggnoppsasiuzlp.sm - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ggnoppsasiuzlp.sm - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ggnoppsasiuzlp.sm