Analysis

  • max time kernel
    32s
  • max time network
    153s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    08/09/2026, 16:06

General

  • Target
    nobaget_v1.apk
  • Size 3.0MB
  • Sample260908-tkdv1ael5y
  • SHA256 5db58e523c7257baf24c132dae0893b036a27f94d4bb5932115b9dd2acd526a5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.nobaget.app
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4321

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.nobaget.app/files/profileInstalled
        • Size 24B
        • SHA256 957798ecda50c794050a48abca0b9590a67240035eca9147cf8bb74657fb4b19
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.nobaget.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 318ae3d186b686c3c85b5bcc838e0b07b237cb9b3a8af87bf298d3924b0ef845
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.nobaget.app/primary.prof
        • Size 2KB
        • SHA256 f24427ad379393bcaecb4dbe8e4a8ab6f4e4d6f1aae36ab30d6e03c359450575
        • MD5 SHA1 SHA512 TLSH