Analysis
- user interaction
yes - max time kernel
86s - max time network
1723s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
- submitted
30/09/2026, 00:51
General
- Target iptv-tree.apk
- Size 10.8MB
- Sample260930-a7t1ysbb96
- SHA256 c6e54c5c006da5ad027f8f02f694b90e2ae9f2e2d8073305277111de6d677be5
Score
7/10
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Checks the presence of a debugger
- Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
de.danielandersson.iptvplayer1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Listens for changes in the sensor environment (might be used to detect emulation)
- Checks memory information
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
profileInstalled
primary.prof.8XpDTN.tmp
primary.prof.jCiziq.tmp