Analysis
- max time kernel
91s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
16/09/2026, 19:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MODEM99.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MODEM99.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
MODEM99.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target MODEM99.apk
- Size 1.5MB
- Sample260916-xyvmfsda76
- SHA256 d039120c5ad65a05651e5fa80dbd55fef4bbeff78d4aa16493671f5509ae1433
- MD5 953b8cc9f27f896f80f959fd776107c1
- SHA1 9637b48fb61b1c99e730fdd94fb5c19689b450ee
- SHA512 b6d1d7c9574dcfc1301bc6be4d5ed6f0745923dc85684246124d339210e1c65e6328db51c1c21f6400538d9cfefa15d8064fab65976b74c947a619a296c3b94d
- SSDEEP 12288:rhLM/8tlACbVMD80CnSaGdyf+KuuNmvX5cnhp3/I:rhw/4A6eWGDlp23/I
- TLSH T1F7752359EBDC9FAACC14A6B59CF976C9A2E200FB30056320F61E51E16651B13C6F3378
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.modem99.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.modem99.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.modem99.app