Analysis
- max time kernel
142s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
10/09/2026, 18:21
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Nextgen_mParivahan.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nextgen_mParivahan.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nextgen_mParivahan.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target Nextgen_mParivahan.apk
- Size 14.8MB
- Sample260910-wzh5dafk2t
- SHA256 e531c06352c9c894c22fe99ffb8cd1bcd99e7af4e9e14dbfbe489f5050a01689
- MD5 73ff22a2348e148a9c1cfe72cce8978a
- SHA1 cbee2ec2f8964ab3b59dfba077d243234ba8291c
- SHA512 b59a039c6781da1f235622327df15f2e9a57d6de3bc6e6807dd6461b2860e655b3dd648bafe9dba2ed372a39e033fda6a8acd3da55aa2045955bb813e5428332
- SSDEEP 393216:u8V1BAB3BkMFjDQB6y3rWCKEEQ5M15aZ77pjbIpE1g:1XBAB3B7jcB6UqH0M1YZ77xlS
- TLSH T141F633DFA3C6B459E8E305374E9A33692727A7684303E663E143427EA4777C01F64B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.google.android.gmscore - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.google.android.gmscore - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.google.android.gmscore - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.google.android.gmscore