Analysis
- max time kernel
26s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
23/09/2026, 18:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mat2.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
mat2.apk
Resource
android-x64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mat2.apk
Resource
android-x64-arm64-20260721-en
3 signatures
150 seconds
General
- Target mat2.apk
- Size 329KB
- Sample260923-w95fcshf89
- SHA256 9d702a4cd96c50fd9f5ac0dd0df09d59d969b3cfc2c85877dfbf72f3daa4ef0b
- MD5 cfa139d294c5f8f37274a33a3a523d7f
- SHA1 0e18294f18f989fa1dc3f9978295fcdeb705af6a
- SHA512 6fa3f0152257d72d6809bf5dff2e403adcd54d2a986c9790d188159e75664dc311320a8fcff92bf40e0a4b931f2e957aea1d248fd0f38d720d0e4c28b07155c4
- SSDEEP 6144:8MraigL0qnMMraigL0qnfMraigL0qnfMraigL0qn4MraigL0qnpd:8oanL0qMoanL0qfoanL0qfoanL0q4oaJ
- TLSH T1A0640291E51DF765EFA2FF7C8AB18A44B0247D806506CD08D033E54189AB0A76EB87DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mat2.mat2 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mat2.mat2 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mat2.mat2 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mat2.mat2 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mat2.mat2