Analysis
- max time kernel
7s - max time network
153s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
28/09/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
keydado.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
150 seconds
General
- Target keydado.apk
- Size 17.7MB
- Sample260928-pma5nstdmc
- SHA256 8e9c7e76dc1c76909d469c359af7886df663f1817db40bca3816aee433ab3ae6
- MD5 1137dd159b8121ea1d84e0c27913a12b
- SHA1 9fa976402c26dfd5fdaf58ccb1f75ce6b1225753
- SHA512 fc1a7fae358390bc3176a356e38788b57189ea1985d88bd2b4f989afe0e4893ba9ba965923fc3026a4bca43eca2dc9df8e74eb3fb34fc17a4013dd58df340fb3
- SSDEEP 196608:7j4KSi0z9VFJAM9z59PEXoPRwIqW8W/NQNPjrmmonyS:72TVv59PE4ZwIF/NKjrm3yS
- TLSH T1EB179D0AD81D8636E5CFF13CAE7F06677539246845E6C096BD2DA148FB972F002B2F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4141 com.hanapsoftware.keydado /system_ext/framework/androidx.window.extensions.jar 4141 com.hanapsoftware.keydado /system_ext/framework/androidx.window.sidecar.jar 4141 com.hanapsoftware.keydado /system_ext/framework/androidx.window.sidecar.jar 4141 com.hanapsoftware.keydado - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.hanapsoftware.keydado
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.hanapsoftware.keydado/files/profileInstalled
- Size 24B
- SHA256 ae996e75b51668a4fb96d9c573d52dd29f7d2ebf2a4382059aeabb6a7a725fec
- MD5 429c77eb60449a5469e36581fdb2e650
- SHA1 888df12955e1a455955cea60074e3b5173356c28
- SHA512 602242bfc54aec6d2bccaa55aeebf7ba5dcbb509733a018a47a59979523af5701b0446c9c5b517c55555044d56d103118c1abcbecf2dafefe17a7cfa6b2e92ef
- MD5 SHA1 SHA512
- Path /data/data/com.hanapsoftware.keydado/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 7fe51c5b37f88fcbd89a9815f0620bff0f8052a5c88727844a49ac193fd69272
- MD5 65ff924f9596c29fd8f2e6f9a480b01e
- SHA1 9f14612a496bd6bc5bab375846e02701174dcddf
- SHA512 e9ffaa4808d8ecfaff021edf81314ae81aabb3150d779e5641f8bd87c9727f0e4faba3eaec161b56609976f673ada15cd4aac1d5b4dd83a7f1d40b1fa020ad7c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.hanapsoftware.keydado/primary.prof
- Size 953B
- SHA256 c2627ad8373ffa8556c11ba27e7366e9188af0a2e60666fddfc8235398899a8c
- MD5 f1bef8ac1d5f643fd74f7ab0215ac686
- SHA1 8fd0aef267c64b99a57bf0a64454c426fa241e9f
- SHA512 7d7487cdf1f55274d43336781881c1dfe64e103405a340095c926117bc1ae2ac627968539ef595a2a031e0f952d0f736d4d86bc1ff4acf0a41b5449f4b10bd02
- TLSH T10411C88B63BFB387C0E96EB3B8804AB6551EA1C380CB93701700804709C68AABD74E58
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH