Analysis
- max time kernel
86s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
06/09/2026, 18:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
diyvod.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
diyvod.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
diyvod.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target diyvod.apk
- Size 2.5MB
- Sample260906-wxedeazdkd
- SHA256 5d6b064bbf206faf6dd2b30970aa64039270e578ab0023ad68ed322b066147a9
- MD5 1bc3a4afe8146dc18e313fc525fb8543
- SHA1 68cc11773868b3f9b85c2e35f17526ac56c53b80
- SHA512 5b6f479ea0937dffcc9d692effc96904e5712ab19ad01806b7019605f83b03f4b8547d4192ec0a2be0968f93359e5a093ce4d75670d9b7b00d13bb87f9a68f7f
- SSDEEP 49152:u6FSZP4bfGEvKoAnRbxR+6YTINCS+YwnKNG8CZ1Q1M37C4ADty1:uHZgzGUARbxWTIlGKNqZ1Q1M37CTDty
- TLSH T192C5CF8AF758692FCCB310764DBA827126668CD28E4397477848332D68B76D80F5DBDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.diyvod - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.diyvod - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.diyvod - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.diyvod - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.diyvod
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.diyvod/files/profileInstalled
- Size 24B
- SHA256 78b77d0eac119784b4c731ced3f16eaaa02d87b01bfd5d2c944e899c51488d23
- MD5 92fb641637eb8327a06837a22183057a
- SHA1 9b39b45a840d84bd3459fcf355f1db3ac8c4fcef
- SHA512 226b0cc81c4a242a719d481bf6272b90a9963a689bdcc89ea11612086dc8999e8b7a16fee9970506a5b995e94e609a93b2e43cdad424db2938af35e9f3116420
- MD5 SHA1 SHA512
- Path /data/data/com.example.diyvod/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a93930c326635746e3b86adb805ed86be82786be1265d240c01d8069de8c3186
- MD5 5c4306ebd28468ae348b539a9bd69dae
- SHA1 ac9fc163d3fa7f053068f6c6e28a4fa5df805b67
- SHA512 a4877c71149d7c9d16218e21bd87fb4ceaf3dbf85e89b51cfa66caa8b30d7fa1540375f92f07bd57ac98fffdc161574f2aa72b342bfb4b4d38e8146bb31bbdc9
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.diyvod/primary.prof
- Size 2KB
- SHA256 51950b5123d1b5e9c248f123045da6e01ec894e56c109bdd87ec8eb40082df6f
- MD5 b8e843a7236c573f627b6aef068390d7
- SHA1 50b3b8ef38a52135b16a40e804878f447e7e9ddf
- SHA512 59022820116f95cfedc523af97e968893dbd55ec8b1c3ee8ab5380eedfc4bf1dd1b0c6ce419f5cf5d1ad3685f682ad3ecd3e7b86632f6f126a3e2a9da1ff31be
- TLSH T1D241F85F6AD602C914DAAF422C89FBA406D4D03EB6C50ED44237912A641935AF544CB3
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.example.diyvod/primary.prof
- Size 4KB
- SHA256 233f6bb59810e9a696015b3e8c6191210af0c0b617a5ea7c78a0a5b5c47843c6
- MD5 cc23a9b8809dc6dcbb9cc13d63e56183
- SHA1 6a9498482ca01792209bc3dc498cd27685e18efa
- SHA512 4ee10f1ce976e9dc7122da4076219159090e5f6c24ed6124e83895ac61feb33838856d6ab93fbcbe56ceb4b91afacf8d322fef033b5d6a788767e6f0570e4bb9
- SSDEEP 96:roX5DjnuE8Cl8QkFrQvBuaQBPoCAsv39Ie:MX1L8w8Xrn1+Cb
- TLSH T1E9917EF536BAD2D6254B84F6121E620B2FF9E9FDD78C2001235F92747C16143C25E5A2
- MD5 SHA1 SHA512 SSDEEP TLSH