Analysis

  • max time kernel
    94s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260721-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system
  • submitted
    27/09/2026, 07:05

General

  • Target
    f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222.bin.apk
  • Size 10.1MB
  • Sample260927-hwpabsag39
  • SHA256 f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.platininvest.alpine
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5105

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation3636519361774924217tmp

        • Path /data/data/com.platininvest.alpine/files/PersistedInstallation3636519361774924217tmp
        • Size 90B
        • SHA256 829f9369f776fdbeb57bfbb67cbb50aca4834158eadc396364686f2cdbcab0e9
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7436287150790618577tmp

        • Path /data/data/com.platininvest.alpine/files/PersistedInstallation7436287150790618577tmp
        • Size 565B
        • SHA256 45b945b41bd27540eb538af29b309c0a3c0a67455fb4da4ec6a5c369b13b6e35
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.platininvest.alpine/files/profileInstalled
        • Size 24B
        • SHA256 87ee8c9bf702df79779e4a1a5b3803ed97e8718bbc98b426feb274ca52970d09
        • MD5 SHA1 SHA512