Analysis
- max time kernel
68s - max time network
160s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
23/09/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
indo18.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
indo18.apk
Resource
android-x64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
indo18.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target indo18.apk
- Size 389KB
- Sample260923-w2d87shc39
- SHA256 301bce491f424a27ea6a930c2063cfc31ff77f145d98528061a4ebd75917c90f
- MD5 da8423eada19cd79f6b89f557345355d
- SHA1 0081632e3fa8034039b95480acd8e6abf9076ed5
- SHA512 099194c26cb16005dc86b1892efc70123bc148825aa40ad04fe1651fc0b168e91d229f9fb28d35f2cb446821eaf0bc87e70168ddacd65449e1b804df5542b843
- SSDEEP 12288:pUu4aZdcW0Uu4aZdcWBUu4aZdcWVUu4aZdcWkUu4aZdcW/:pGvGKGeGDGq
- TLSH T1D48402EA12D94176E768097944340B4247E10B17CA98FD9D7823DCFA9E1AC977FC8BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.indo18.indo18 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.indo18.indo18 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.indo18.indo18 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.indo18.indo18 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.indo18.indo18