Analysis
- max time kernel
46s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
09/09/2026, 04:06
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 2.6MB
- Sample260909-en91aabl2w
- SHA256 0d37fe9b4ad05d0ebbd9c70468177f11e4e41c242acee7af1e440983e5d585d4
- MD5 d0ffde8616dd7cd4ccf563f6a288e548
- SHA1 680e82b95ff69a9cd174e813283b2f6d182378ca
- SHA512 fe09ff7b41d2a610665daa7bb8d2274e540cd622f5842d88927355419146f101c5072938e6b0b1eeb39fb7eb645a5e095a60905b7c00910e187e1e1058ece199
- SSDEEP 49152:4rYD7K0M5jRr+uUDkQM75UUVTwQlmEY3UZBUR2Hoyp7wprAS6/QaQ5m2rXN:9K0M5jF+pMyUVTf4VUZ3oUU36/Q9c25
- TLSH T1BCC5CE85F749BA2FC8F793324A39866561468D068F83DB836558333C68B76C44F5AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.jgzmih.hdjqgaswzw - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 1.2.4.8 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.jgzmih.hdjqgaswzw - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.jgzmih.hdjqgaswzw - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.jgzmih.hdjqgaswzw - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.jgzmih.hdjqgaswzw
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jgzmih.hdjqgaswzw/files/profileInstalled
- Size 24B
- SHA256 2cf3cd54af09959f785047147c18e9c8b0af1f71e6cdb2164f4425ef35487fd2
- MD5 ca916d9a5f7ba85800acb695e9958532
- SHA1 94a720fe24e98232ac5a689030460d5bb8a444e1
- SHA512 96a4b98b9b8ddd9cede0d8c77cc5bc7674ff039e7095b9ae859dead5b824baed2e97f8b24072475d84fadf1639c363c717433407ab4b963a5d6480be1aa20de2
- MD5 SHA1 SHA512
- Path /data/data/com.jgzmih.hdjqgaswzw/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 554af4b846b812e5300764cc7dedf7158ff0bf096d57b8b7f7457598145ec293
- MD5 b1f8662c0e6498991b5e2d2d27b85315
- SHA1 ea5115774fc31d4d838d9cba050e16b7448480e2
- SHA512 e04e040c6d30e236d73a3c51e6d98df07d119e88c544331e2d29fd9645b3c0f20d23194abbefe5009db3c958124595bc011768c7c6dfa4674ec5a05d4d549fea
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.jgzmih.hdjqgaswzw/primary.prof
- Size 916B
- SHA256 f4b78bcfaef22efb2151a74f257881e9fe056a69eb461c5329319ef5499ccc41
- MD5 fc91c1d376428275d821278407072f7a
- SHA1 88ef77887334f3ea9546f932a07805f4abb1dc41
- SHA512 33f5bc9edc7a40ba733debca2a96ab455518515a89c7eb76775a585e7395315ed5e6689d2f26d9be7b5f7abeef4529e17f29847e3319688e7c6f56650c17cd5e
- TLSH T1141184FE58131406FF48F810888999EE81B760F2816B628E07ED1B2626604CCA28C214
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.jgzmih.hdjqgaswzw/primary.prof
- Size 2KB
- SHA256 768096b9318e01b1cd7dc00445b014448a47849646f0a6e0c417e7a7bb1248d5
- MD5 c1695754f6887c3351d87891473802d7
- SHA1 5db9cc3b5a5e2d5888e069d5056dc3ad58887cd1
- SHA512 90fc2c4c00f983438fac2a4e1ef6a266d034d9e72c46d9ff186d18e2e58ee7e8e6274f0069a0d0f58521f11e8af0ed94681a737461e2e07686754decc2008a6d
- TLSH T1FE4129AFC84388AF3329C5806716CF528F1AD860008C41CB6BC6DC26D2F682A32060E6
- MD5 SHA1 SHA512 TLSH