Analysis
- max time kernel
149s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/09/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AsiaToto.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
AsiaToto.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
AsiaToto.apk
Resource
android-x64-arm64-20260721-en
4 signatures
150 seconds
General
- Target AsiaToto.apk
- Size 2.6MB
- Sample260919-w2fr2aae24
- SHA256 1af5234a7194b0eb5bbff2eec70fd1971e552f51521f76be03741986d11d81ed
- MD5 57c5e3f12d05d70874bbb470ea50f299
- SHA1 c5b93afe4fb39ca0ec1648d89d749b3b5446047c
- SHA512 b958b66b2c3f444f8c384955c4df456b08a23f250a7b19fff6eed873ca0bbfacf0c6923cb1df253524bfd87636954d81cdeca92e8933d01789d9145f713876c1
- SSDEEP 49152:L1bq+x0lLY5VA0fSeNwgCqnYo03ogldvjCRg8YRwplMgPEE2:LAAF5VNSeNutd+C8KwLOE2
- TLSH T1A2D50182FF65C82EC83B45374DAA1335222A9E1EC597974785EC31282877AD80FD9FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.p4d_asiatoto.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.p4d_asiatoto.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.p4d_asiatoto.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.p4d_asiatoto.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.p4d_asiatoto.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.p4d_asiatoto.app
Processes
-
com.p4d_asiatoto.app1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5082
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.p4d_asiatoto.app/files/profileInstalled
- Size 24B
- SHA256 7b9f3043011b48d0ab1d5b2898853a886d4268e31384e43b55b6f296faab0c92
- MD5 3d2206dad9c987d0ed7faaeac80581e0
- SHA1 ec7930a10c09c5a6a1c5b4491d40dd2719fd6384
- SHA512 e617d6de8247c74e75e5606c7349d78abad3b7f96c4ee73e773864e62c7c7422f2d9fee654626bfd322dc6b529b8a06faf219fe59e45a7524253c658197e130a
- MD5 SHA1 SHA512
- Path /data/data/com.p4d_asiatoto.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 399b7e218990636b82f66fb7dd2b167f3c2d6fc279f928ccde231cc832796c27
- MD5 7602c70dc9b35a40ddc213576c1277b1
- SHA1 52a91d727470be686bb9446439bae1ebd7249f0f
- SHA512 97a85a87de0254c63927c68f425bd454449558816ea7777da0c89038efe3e79162d57ce89df94be3089411e0215de66e92f96a5a7ac8e5ffdc1a04890bc1c73d
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.p4d_asiatoto.app/primary.prof
- Size 2KB
- SHA256 4435698974a0c642187b010787d39390171a8731ac3d15ab853e384c9a8cae78
- MD5 8f810215a6465fc1b120ffd70bfa55d2
- SHA1 56c6eeebe094671451987899c1899370f04dbb02
- SHA512 78ad5e7ea4cd1a9fca47d3518dd9f14df098d55150824103c264154b51b65a70f9e9c361caa97595d81c5cc6cb484ab9950eea7ab98bcbdc925892f7acbd23a6
- TLSH T1F341F9876A21976E142F4AD4A13BC6F326D5C0D7B8E5B2BA20C794CCD3AD739816703D
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.p4d_asiatoto.app/primary.prof
- Size 5KB
- SHA256 b10845c95a8e15407bc8d779a41f0fd6b72de3727fdb1b5abdc6531bb7295493
- MD5 aebda04608e02ba0b64b8c76b21ee4e2
- SHA1 5f02aef577589f5a060f74a7aefc082ccbc5b265
- SHA512 481bf326c01bad2aa4cfcf29df0e6354e01da10c5a7ed0d89df4c090a10cd060a944152eb8594c0b69c5831d8707a6c51c62b0a4f40c97b4ecc1cb6e63f9a44a
- SSDEEP 96:xR4eIEjtAJstFu4WuHudaKRCwH1Q5RN998SIr49dGg714ugaDuYsrYOl5chuGE:IWKJstFu4WAudbowVQ5RmSSwjpgmxyYY
- TLSH T1ABC1AF0EBF22A5886C4E06E70A5858F3B76679C775F104E2E0D2CB3570F5F5A5C75402
- MD5 SHA1 SHA512 SSDEEP TLSH