Analysis
- max time kernel
57s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/09/2026, 05:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AnandMatka.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target AnandMatka.apk
- Size 18.9MB
- Sample260908-fxeq6ssbrd
- SHA256 a402ea0cab5b2b4a73b65dedcf397c18874dd3a2e179b2c156b4452e280c1941
- MD5 34ea6e60821f2db624b8d3bbdd8099ca
- SHA1 c492ef77e93947ee8244b3aa3b94700ddb59d327
- SHA512 f502895461b6b54979c7e8b8fb32cb69158a5829d247acfea07973e17c0605af773994ed2af229f29900cb4b4dfc642dbc112cce08afc666612a2050aac81afd
- SSDEEP 98304:OFpX2eZ7KfrYZbpXLmKq+bMLLQVgIVpU/FgiopS54QV009uImMqxaXJEukEYK3:alq+x3nSFgI5mmdEuXL
- TLSH T17E179D22BB450832C5AF57316EFD035ABF3043B76643578A720085A8BECB2C557B9BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.anandmatka - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.anandmatka - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.anandmatka
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.anandmatka/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 fc86f315b538cc05b212f677c50bce509ffe4c4260bdca8860978ffc64efa7ba
- MD5 5290d4af00e18a7eeb7cf8667789f562
- SHA1 99f7f7ef86e9a9b8a130f097b2c000b8a73fb3c7
- SHA512 2d9440256848d3f373b81759d8fe2db6d2abc58dd6d460b98710f6d173e5d18268f755f8207f5ed4522d50d676b1662f3457c21dffbdeb10ce73305390fafd91
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.anandmatka/primary.prof
- Size 9KB
- SHA256 494cd2157b637440c1a010c08f31261fe4e6fd22c3feab23513e885351dcd756
- MD5 c9789605da833cccaeb0fdab4cc2b9c6
- SHA1 2e43b8bb14b7992e42153c08df6f06825b6468c8
- SHA512 8592e860a70bbd1c9f4ea8534e55ee216f98f7f605e4dc7cf5566e3eee0e3b25ad201650e07283488eeb179e6728f44ebd2008d1ffd2fbae72b571496090e555
- SSDEEP 192:DzbqQE+w+p6G6Z46+6Xfuhh2eFvmFzyX76TeBjX378SghQ7V24ODxuNxORYi:DHQPKxOfu/EFzG+T0jbDNOsa
- TLSH T17F12AFC12AD6D3E72885C4A7FE8609D313E82CF525C79187E4BE351C45BE488495E6CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.example.anandmatka/primary.prof
- Size 12KB
- SHA256 5c1986ec82a826615aec68817c55876f196dbe7b48df6411f3df4f8dfc6cbda3
- MD5 6649e789d441d79eae2a03426a9d8155
- SHA1 3a21fb0052d9bcbbf6de855f0a82d7513e257d09
- SHA512 23cd7a3b44615dcdd2c478814ae4ceeea7df952842edd1bdb4a2a9eac8a32b0eadba14548edf289f678ad4e52aaf3fd00860ef0fecf4c41361a23919bcf33c87
- SSDEEP 384:EQm64nUQ5QT0H1X3z7bWi7MMWO+eGnHvGb:EQmr1Ht3/bWi7MhO+3HQ
- TLSH T16D52CF42B05FAFA94F2D0AE57F065A86A2CBCA7DDC2C70B4B9041C682FC55FD89B4117
- MD5 SHA1 SHA512 SSDEEP TLSH