Analysis
- max time kernel
49s - max time network
160s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
24/09/2026, 12:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Rajatoto_0.0.1.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rajatoto_0.0.1.apk
Resource
android-x64-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Rajatoto_0.0.1.apk
Resource
android-x64-arm64-20260721-en
2 signatures
150 seconds
General
- Target Rajatoto_0.0.1.apk
- Size 5.4MB
- Sample260924-phyeea1w3q
- SHA256 7b1c952cf3cad98e0531684861863e55e19ed6d6e9ec3eef7ad90ad2da8dba56
- MD5 969d9957c0a838639869998e163bc10a
- SHA1 6cbe1bf0cae3103f056798e69ecbc50b476dabcc
- SHA512 1e262c3b607052c45f2a7239c1baad73943b890c4ef13be8b5a398a1b16bf82bc82fa1388bbf9d1fdcc0592cb31b091542d60a8590d13ff2bc3a00f77f755fc2
- SSDEEP 98304:nLaP64oojyk6N6q8ZqgJXN3Q9FrFY1pppRsJrUt9c9N4Bdk3LRoTYrFQ:Ojoojy9H8Z1Jd8FrFPrHN4Leq
- TLSH T10746F1CBFBD8592FC87700B2C9AE52B166474D028A839F43AD44361C697B6D41F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.asiasigma.agentRajatoto - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.asiasigma.agentRajatoto - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.asiasigma.agentRajatoto - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.asiasigma.agentRajatoto
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.asiasigma.agentRajatoto/files/profileInstalled
- Size 24B
- SHA256 f7b2acb7666e0a6485165433910e9b8b82170e171f122b5fb753e5f0727622a8
- MD5 c4d908a4f5dd0d90d8cc57d25ed17c5e
- SHA1 c2b7525553237479af16c081c6a88785fad13ef4
- SHA512 e2cf8128449803b8d3842b19a9d70d320612d0fc8791db5a44482fddaa3118812583ffc46f1fde5f074227a68363a45ffd3e2e26394e70ef73999005dd035672
- MD5 SHA1 SHA512
- Path /data/data/com.asiasigma.agentRajatoto/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 3ca43fbad78077edbb71c23d726089deaf35a282db40852f73793ef8aa54f9f7
- MD5 bac16ad21ee0792b0559a5a92d724a59
- SHA1 12ff47d03a8a492825bc008faff6a7febeca06f4
- SHA512 eb1d521dc0d49065759557883b8245fcb3044c6841c72d4731d738bb9f2c94e6181e2219212a4e85a82619dc6f1ca89b876317820d905e2e9bef215384b6d092
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.asiasigma.agentRajatoto/primary.prof
- Size 2KB
- SHA256 1e53a49b45aa168ee2c91cb1481d8feb7b1a70dec180a995fbea9de46c587385
- MD5 79493591d07f9efba1703e96d4252a52
- SHA1 d2eb11123bfe716cfc3dbcc008073f1933d4ef91
- SHA512 f02781ed1ad5ae9d77e9a15da67c3c404343a70aa7f9b354f56595e958267f40c70db23eed7db3a19d92d2bf0f26c71f3c2d8c383b35d0ed090d94f159d8ff15
- TLSH T1A8514CA702CE1CE0E35488396A4BDDFC334B2F4EC7EA146935416156E168A344193F8C
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.asiasigma.agentRajatoto/primary.prof
- Size 7KB
- SHA256 cffc2edbb791af3688753d25c9569bd5ea7c8dd65788b546caf11524face585d
- MD5 ef0f0d4eb6e8ea3f9d2586af25caf8e9
- SHA1 1726d11e1af1f99bd16eef3196e94853ef820c22
- SHA512 0e87c3eaf6ceb6c6f0654cfc432aaf3ba0ab7f5284cb822ec218c60962263609e142d46b4ddb01afd1981521f220cebcba4fb3bdc5e3f13c959e498b63120ca9
- SSDEEP 192:N0F21v3eOz07zVtK81RCGjrQ5uRb1TdxCCQz9TTylpS:N0SvR6tK8HC95oVdxVQhHsS
- TLSH T11AF1AF2F0C39629B5AC543156951AA10F38B03FCD96214E3EADF7BE5913BC470780AB9
- MD5 SHA1 SHA512 SSDEEP TLSH