Analysis
- max time kernel
122s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
28/09/2026, 12:30
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-kash7-release.apk
Resource
android-x86-arm-20260721-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-kash7-release.apk
Resource
android-x64-20260721-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-kash7-release.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
General
- Target app-kash7-release.apk
- Size 6.6MB
- Sample260928-pplzysty6r
- SHA256 4aa92fc1af0e6c82790959527a915b40da1a032a802f253a71633d005c7acdf3
- MD5 74b807ef74f6f238b77a39a3ef08aeff
- SHA1 f4bd81960649725411364c9cc575ecb0a009d56d
- SHA512 09f1a09fd1b870f0682461dad07c76af07dfef8b5becf21121eb924993baf7eda5a30d74f8ed49f4097e9aed51ce5fff5099956b814cb43bac779a37c8bc68d4
- SSDEEP 98304:w/b0YKmbo6s/xWN8jMKOhbjknGQFTKHFm/gCRllLwb7pXe5dzx8ESsyCJcd++cd5:W0Us/xxjrYRHUoV7JeHisNIcPx
- TLSH T195660296F758DE2FC4777032096A6231525B8D128E87D78769483F5C287B6E80F4EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.kash7.app - Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones com.kash7.app - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kash7.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kash7.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.kash7.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kash7.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.kash7.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kash7.app
Processes
-
com.kash7.app1⤵
- Obtains sensitive information copied to the device clipboard
- Reads the contacts stored on the device.
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5037
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.kash7.app/files/PersistedInstallation7762225906364137161tmp
- Size 90B
- SHA256 6a3513cc19168aaf0942cf6e026458dd04a3e3f7c79866d53ca2aed4ca29ccbf
- MD5 05a998e1bf36c32ec6ca6064b67ef992
- SHA1 855eb5ed2fa77bcc5c6c3572526f37d733985542
- SHA512 b0b8a4fe9128d2e19120868a6d1f290f7ef9c8dcc88820d62010ebff9795c78cab87c04baa516caf95f5fff7462bd231af3e7492719a9dfbae3826118ca124ed
- TLSH T1E5B01281AA32425198CAA2222D4CD1403E48184004098EA40F4CE04085811D89143DF8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.kash7.app/files/PersistedInstallation8818122194103746829tmp
- Size 572B
- SHA256 ea402eed523181db1dadeb2023b63f0a0ddf0100295a603c2c39fb1f5736edf4
- MD5 6b33639093a71f99cf7cfbddfaed8e6b
- SHA1 3b98d81b904be6f2b2cf078faa46902f5f853993
- SHA512 2038b6a0980a60a8e5b6ba944da7b4b76c693e5903eb3bafe3631c67a3c49772349c2fe4db81443599925eb16bcba757ac64e24759584168d15263b326c4a03d
- TLSH T138F0E75D351C065CF843294337DD9E468DC808F558591CB92DD79494C6D5943D1432FC
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.kash7.app/files/profileInstalled
- Size 24B
- SHA256 bb3218cbade163d050eee8525dd2a2f79d49a3256f031e3dc9314e8e53d08357
- MD5 b867dcac1cc3816b30e6cd693355e315
- SHA1 89cda8e06079424575219ed35b97d79e3f18183a
- SHA512 06e361f513c7595b6d53707dc0a34fd9b658566dba20e459a301c689cb833c335efe954bd2c38e139b348b521f669069882be0cfeded2e794052af410a8b9cd1
- MD5 SHA1 SHA512
- Path /data/data/com.kash7.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 59aebd5eafdf76bb92d81f26b94d1282714623955587325b0748bb1dbf9a085e
- MD5 19f4cf531c37f63e1ac216b5f0eb9367
- SHA1 f1d9fff1bef584ee253d4b7b0c12d13fd1e5af00
- SHA512 7d263d758ace3b82fb51a27f4f750a61590955242948871bce006c7ba6d55675f564c7d75198382ec70a941f2927ea5684d03ec268f8e8bbd9cd22a7fea76dd6
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.kash7.app/primary.prof
- Size 9KB
- SHA256 17e83f44615d61efdf07f20fa2f64b4e0ece4b75d1bd151b22f4b75f4eb75610
- MD5 0130ab9ce0b668bf0570750010e0c371
- SHA1 7b996b2d9d1f7a0e963f814e25e199fd851e123e
- SHA512 1692f0a9f9d6db10f2f91583d658c0a3c9a94342a0b4452ea1c9c95a1a0d4afed5197709642bf1a342f5315a349399c991998573f31a0dcacbabac20b8998a6a
- SSDEEP 192:TUbPRKi2LpMAbH0eEFrzzl+gE7xL6E79njHP5jRPRb8xzu7SNDi7FM0:TonSbH0e2e7xh79jHR5+xzrK60
- TLSH T17A12A0DBD201EDC32A743F52F6A28265A051097EBF59C1CC6432B0F33665BBBE689119
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.kash7.app/primary.prof
- Size 2KB
- SHA256 a85c20b5dd51768806dc9af76aa5d1ee5f0bc2adcfba10885213035391020892
- MD5 007f685e3a5ff35752eaa5b84f718fc5
- SHA1 550b6c0a1ab69003494235536a891634f06a0b93
- SHA512 6e0ed42635ea4abbe98b90ddc2e207eed4ca5a67a0267e0a27335617facea9a1520b1b5414aa95cf397bec1e3f4006c9dae917d75382b06032d46d7a7c548370
- TLSH T1EC513C829D19AA8D7578CF6A6B9F21A347F2261E8998B797F4741C285F3F80C519003E
- MD5 SHA1 SHA512 TLSH