Analysis
- max time kernel
26s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
23/09/2026, 18:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mbi33.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
mbi33.apk
Resource
android-x64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mbi33.apk
Resource
android-x64-arm64-20260721-en
3 signatures
150 seconds
General
- Target mbi33.apk
- Size 381KB
- Sample260923-w9yykshf74
- SHA256 a1330b8120248fac9ad99baaaea7d38431614910383289eb36d07ed02fbc6692
- MD5 a4f21c4b7fa44fe362385c0d1ebf1883
- SHA1 27c0ec38a087a9254ca0e4569208ce1e956acc95
- SHA512 f84660ae439da48988b4a437ec8d2f6628aaf18946e7baef820a3daf10e11f4b619c4c2abbab868da628cce10d11fdeb92a9149468400b16f7879052fd45897e
- SSDEEP 6144:gw0D9jMb+b+w0D9jMb+b9w0D9jMb+bxw0D9jMb+biw0D9jMb+blX:V0D9jq+T0D9jq+e0D9jq+S0D9jq+X0DZ
- TLSH T1818402829771F319D85241B56F5B51303B02AFE86B1A2F8D208A7730FB4AF9636D47E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mbi33.mbi33 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mbi33.mbi33 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mbi33.mbi33 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mbi33.mbi33 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mbi33.mbi33