Analysis
- max time kernel
46s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
08/09/2026, 15:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rewemind-android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
rewemind-android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
rewemind-android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target rewemind-android.apk
- Size 5.3MB
- Sample260908-sld2qagc85
- SHA256 8e1a39e1acf27e261dba041f5436f038528002c8e003034a038d95bcc48fac62
- MD5 aa4ea8c26e4faaea2adf0520ebc022aa
- SHA1 12e9403d0189641da3fe07bbe5fe2abbe475d303
- SHA512 0176da6e6c354ee36709216dc582df7ab79471769cea626dd434eac87b5d1af5807f9827a2e93e9f02e12b9a2cf1f11c43e3723dbf51c491b70a3c0b2673b856
- SSDEEP 98304:QNVTT/xlAZA/4UGfw2ulDoIwYxXjwDIEyawB16pgG9GdBlV+cI7xHJvr5otFJG9N:QLTT/xlAZA/4UGoDe48C1agG8JUxWY9N
- TLSH T197461282EBE15E9FCCB7423A0B9B573116A18F46D9A2D3078944366C6DB73C80F54BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.rewemind.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.rewemind.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.rewemind.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.rewemind.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.rewemind.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rewemind.app/files/profileInstalled
- Size 24B
- SHA256 fbb10802a67c48ae6087832af9d78c02c3b7e3003f3a6f5690270a1409107173
- MD5 03f6fb12a8de30b74aa3b4341c68038d
- SHA1 e742c494d0c28cee0b6b1059e3e102d02e185337
- SHA512 d43ac622a9c13228d83191088a3a9895729927b8c43e2505178142972fe72ab4307e39c6ff157a9b1fdb2659041b72e27561fbc56f2ebcbd0d1441b39f32fe84
- MD5 SHA1 SHA512
- Path /data/data/com.rewemind.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a9dce6a303c8770d5805b21875d240659e638b1caacb04f688ec3a48040c38e3
- MD5 2982ddfa7a81f3e2d3fd57e11d51af07
- SHA1 66b3b8bb0355d009266245f782de0be37caefbf5
- SHA512 6a1ac35bf7834c9abae53aec17d81d195b812d112fba2285fc638ad7119473bb9d8e3a5b51fb4aeefec4e568137b1aec9d0f3a454807ceaaee272f88f0266279
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.rewemind.app/primary.prof
- Size 2KB
- SHA256 cb8b210fa72f0930c141e29f70361abe03603c7240a4cb43479555b5ea375ad5
- MD5 9a151824e73ba043d249a7622a47371b
- SHA1 68df6d645c11d6fac5365a9fe382df3be337d8c3
- SHA512 787ea4dad3287eee9c76bb067f485c7b852a9283466ed4678a1017df674b0d090ab39a373092c2640dfd3cd773e49adfb5a91dc14f6608c62906d8713d140545
- TLSH T19D512C07EAA008592839591EECFA50D6378E00CFB8315A81AB7FD06BCDC007A5968DD1
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.rewemind.app/primary.prof
- Size 5KB
- SHA256 dfac4ec77353d25ab948a3740c35a7cd4104eaae98594f4b921473581c896e93
- MD5 1df8d5acad86701f0f16fc8a74f2a809
- SHA1 e346396cfffa3607f595103c0a7c1158611b3f26
- SHA512 c8be82ba971ecd3f804ec236edae8840e09a9c11d29e914c64b5498d734478e9e6ac43806c3a5c1063020d2d108dce9163664400c1816a83447089c1b2f17325
- SSDEEP 96:Qlxs6zYdQ8zR9mU7Q2GinyH9P8tXKuHi+XpvL+CwmE1i+oOosTzN261lsBH:QnDz4Q8zRbQHasKtXv5pSCw+ORt26m
- TLSH T187C18EAA91FA350F5C8DBBCC848465B5CA4BBF48863A417C5340A97E5EB096CCC6D349
- MD5 SHA1 SHA512 SSDEEP TLSH