Analysis
- max time kernel
149s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
25/09/2026, 12:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gift-wallet-1.3.8.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gift-wallet-1.3.8.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
gift-wallet-1.3.8.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target gift-wallet-1.3.8.apk
- Size 4.6MB
- Sample260925-pppe3swdjd
- SHA256 c1862ecc0a2d443e5090e9045c273045902b8136c7a6818e144b913f4bcbda4a
- MD5 b7c2d7f3b1cd9b347db179aa4388fda8
- SHA1 ba71ab1643e5e19e7749389366a679ad2ffe85ad
- SHA512 d3340bf46e2a0df8fd66181bd822156448500b99d0c0afda8b15094fecddd2f2f63ae5ad648ede82be62a1bd5ad9a9956ef5b9973a44cd24c50e84562fbde582
- SSDEEP 98304:ftm3HLIWzd826888KvKVMhYvzgQeSLcdDXxO8wtloS9o/KrnbS:ftYrIWZyWVMhCgGUDhO80U
- TLSH T1CE26F08BFB58592FC87700F245AE923156574D168A83DB83AD48371C39B76E43F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener net.giftwallet.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone net.giftwallet.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver net.giftwallet.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo net.giftwallet.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo net.giftwallet.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/net.giftwallet.app/files/profileInstalled
- Size 24B
- SHA256 cf65d88e72433b31d9692aeee6f6f729648ee27c72e93a22b9dc9bd9edc8e90d
- MD5 7df1bd5fe5e1a19f95b647ff5d4a6aad
- SHA1 a583469b652ade2b7cb8243537f65a676de813af
- SHA512 bcf8dfac85638abf3933c0c6207e10b7cb522b27ba13513edf088411addeb939dc219be4d96676cf5a80670eeaca5c0f4a0771d5c2e6b3ffff8fa13cba62b273
- MD5 SHA1 SHA512
- Path /data/data/net.giftwallet.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4372f5b55c3841f62caa0c27d774e53d034acba8f7ffbc676bfd0921756fbbb2
- MD5 acdacdf72d7ec1d17d13899fe471fa08
- SHA1 4d0d4cbcb19f6f1c4dac5cc0c9400e4b67099069
- SHA512 2f0aae422b6633f91106210af09bfdafe4ff9ea2b9654c371be90212c03b74efecd582a5f56d8471ab2fd464c473459a85113a0cda9803820df50cf9bcdeb792
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/net.giftwallet.app/primary.prof
- Size 2KB
- SHA256 beb09868d6cb5172ac5c49be0877cdf112e83204f2451d538781df71764c3307
- MD5 bcad2b0fddf36e989ddb2b84c4ccc3f4
- SHA1 e44e7331b6aedc278df44904fb2884e599f2b66b
- SHA512 f65420ef9d33b677fa724fdb7e8cc33c017f6dc6e5c637f94c5089e0e01f413dcae1ac26d4823e3486b627785ff531b490eea6b7a7fec3f1d7e625e2dbdcd046
- TLSH T1B44129DE5C88325424BE544972A445B81E8805AE32D1EE3199D92ECE100FEC238CD737
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/net.giftwallet.app/primary.prof
- Size 3KB
- SHA256 2bf01be98fe388493bacd6a9b8ddfb13d76439b25a13a558f4bfff35a02b159a
- MD5 a311a5a88eeb9460e4c599ef58af0e3f
- SHA1 1f1107919e548a91f6175deb07d16c65f6952bdb
- SHA512 2114583093eedbd6b065203205d40c5a15fedfa2ba5894df516da7f58d3ba327f5e814d8c6657a1b6368ff8f476c9d9ce8ac502a2fa4463d1743c628bdb2a328
- TLSH T19A615CD6E476537974B8E94450A5E7C8526D0F5A4555CE969CF52AF838CCA0850200DA
- MD5 SHA1 SHA512 TLSH