Analysis
- max time kernel
23s - max time network
26s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
09/09/2026, 03:11
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target android.apk
- Size 4.4MB
- Sample260909-dpvrbaag28
- SHA256 79e9c68783c8245473aff7a8e525e93aeab50b3ec3ab25501a93b83402263e7f
- MD5 bc20b91202e292e7e946cfdc34e7eb85
- SHA1 f246f766cf96a1072185d2915ae76431134de336
- SHA512 8b5148f25efad9e7f7ba7c9e6aa34cdf03a878900e238075430d8b78ffa9c43384224f7dd4022c3d3e43b14ed990edd082f0f88d6cde27d3766a50cd2be11dc1
- SSDEEP 98304:2TZ7Z65of9UPZKk6Jgjv25HE+fYRbPbUg0Kz3lKO:2F7o5of9Kw025kpRTIgd3R
- TLSH T15C26CDC2AADC781ACB729133CBAAF2FD42B3CC4E850192177574F658587758D4EB1AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener tf.monochrome.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone tf.monochrome.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver tf.monochrome.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo tf.monochrome.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo tf.monochrome.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/tf.monochrome.app/files/profileInstalled
- Size 24B
- SHA256 44e4a11b18e084fd7907818b7c3edab9a6ab2c67b84eb8aab6e120d355ff12d8
- MD5 ac163d20b86d3469b3c5c88873189827
- SHA1 f909656a251e7cfae16f553eaff0665f30907b00
- SHA512 3feb6090949caf104efedf0214c341b80227cc90c2aa30c36ef9f6264615e119abbf273d193147265c3a09842fc269dbf19477b9afe32606471ce591e4bea952
- MD5 SHA1 SHA512