Analysis
- max time kernel
32s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
08/09/2026, 16:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nobaget_v1.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
nobaget_v1.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
nobaget_v1.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target nobaget_v1.apk
- Size 3.0MB
- Sample260908-tkdv1ael5y
- SHA256 5db58e523c7257baf24c132dae0893b036a27f94d4bb5932115b9dd2acd526a5
- MD5 0c85092d82bbc199bbfbb158143fccf7
- SHA1 cec546353a7bd28f7a23a56d488913d4c8097eee
- SHA512 b1e56bda86a3c35417315fccc4ba2f30884658be207d7165133c17d25e8dd7dbfec70dfbecf3ef69cfcdff2034c685b66281768c35da684e2e4678dd893a6b14
- SSDEEP 49152:O3a0/7DppX9G8omQASTlKc/iiCNsW/bI61NBYxNcGrrAmy2YwwTuUvDvTP4LS7gE:O3a0Pppt7ojAYjCuWzZ5Ybc8rAmhYwwb
- TLSH T1E7E51282FBE62D2FCC7B44360FAB17715B559E03C682DB078A94362C2D3B6C44E59AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.nobaget.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.nobaget.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.nobaget.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.nobaget.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.nobaget.app/files/profileInstalled
- Size 24B
- SHA256 957798ecda50c794050a48abca0b9590a67240035eca9147cf8bb74657fb4b19
- MD5 92207220c6c6fbcc852f72858bd84e61
- SHA1 98b9560713c34a9c6383f7a318f218acba6a433d
- SHA512 079cd03608f3dacb1991b03c22e706a9f4692c6309ef9fdef119c59edbd981a368c82157e8bd70940089baf4e1d609b8d8596305af302d7109483f8dbcafe274
- MD5 SHA1 SHA512
- Path /data/data/com.nobaget.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 318ae3d186b686c3c85b5bcc838e0b07b237cb9b3a8af87bf298d3924b0ef845
- MD5 eae3994e99f0bb30a31ca752a7176216
- SHA1 d32df7587fb1885fba4efcdf045bc53f375601df
- SHA512 cf5f0e2077cb8ac4a5e7e148ab979ac5e806a141c75097399cc03ca5195c62496529783f82a2f7126d749d087a42db7367a75812df64d1c4f8168867e1f481c6
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.nobaget.app/primary.prof
- Size 2KB
- SHA256 f24427ad379393bcaecb4dbe8e4a8ab6f4e4d6f1aae36ab30d6e03c359450575
- MD5 32476070a295d54355d6f439104e7539
- SHA1 b3ac03689c0dbb95bf15ab38463f5e011e7c7bee
- SHA512 fe2aaa805712d20f80593abd6ee6050327751305a6ba5e082354e68121e39cb225aba939712dccea80add492661186ac3af1b05aff9809ca2c2f2f46532fe675
- TLSH T1E9511901A72D5C2E03A3754FA9F570E002D609A098E6E48EA4BEFCE34F8B571581A46B
- MD5 SHA1 SHA512 TLSH