Analysis
- max time kernel
50s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
09/09/2026, 04:06
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 2.6MB
- Sample260909-en91aabl2w
- SHA256 0d37fe9b4ad05d0ebbd9c70468177f11e4e41c242acee7af1e440983e5d585d4
- MD5 d0ffde8616dd7cd4ccf563f6a288e548
- SHA1 680e82b95ff69a9cd174e813283b2f6d182378ca
- SHA512 fe09ff7b41d2a610665daa7bb8d2274e540cd622f5842d88927355419146f101c5072938e6b0b1eeb39fb7eb645a5e095a60905b7c00910e187e1e1058ece199
- SSDEEP 49152:4rYD7K0M5jRr+uUDkQM75UUVTwQlmEY3UZBUR2Hoyp7wprAS6/QaQ5m2rXN:9K0M5jF+pMyUVTf4VUZ3oUU36/Q9c25
- TLSH T1BCC5CE85F749BA2FC8F793324A39866561468D068F83DB836558333C68B76C44F5AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.jgzmih.hdjqgaswzw - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 1.2.4.8 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.jgzmih.hdjqgaswzw - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.jgzmih.hdjqgaswzw
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jgzmih.hdjqgaswzw/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a3b27141e4115cf43fe1a29b3c685446bb5d7981c3cfceea971a034f42a318fc
- MD5 569dd23feecc8be8be1181f2b3933238
- SHA1 3936cfb321c47cac254473b84069b79dfb1e328f
- SHA512 f4abe2e88b859b572711fa5ed9685e64f2e89bd976546add88ea5196d819df3193cbc9acd7442b9fec78a72c76c26f8282862d8a31383e98a0d9d525ce642bbb
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.jgzmih.hdjqgaswzw/primary.prof
- Size 916B
- SHA256 f4b78bcfaef22efb2151a74f257881e9fe056a69eb461c5329319ef5499ccc41
- MD5 fc91c1d376428275d821278407072f7a
- SHA1 88ef77887334f3ea9546f932a07805f4abb1dc41
- SHA512 33f5bc9edc7a40ba733debca2a96ab455518515a89c7eb76775a585e7395315ed5e6689d2f26d9be7b5f7abeef4529e17f29847e3319688e7c6f56650c17cd5e
- TLSH T1141184FE58131406FF48F810888999EE81B760F2816B628E07ED1B2626604CCA28C214
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.jgzmih.hdjqgaswzw/primary.prof
- Size 25B
- SHA256 25a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91
- MD5 b9d9e0f8902d129e1aeebff0ae7b725b
- SHA1 cb0d2b4c9dd60a5c1fc6261fb581bcd3416fe781
- SHA512 f158a9dc753e0cb41f71a98714ff02198c576bacdd792a6153fdaf6f9a7b52d8cfb6d09099a269d0c1b0d31e2ea5a307ea1db85115bdc6797887a6de36d597f6
- MD5 SHA1 SHA512