Analysis
- max time kernel
146s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/09/2026, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
iptv-tree.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
iptv-tree.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
iptv-tree.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target iptv-tree.apk
- Size 10.8MB
- Sample260930-anl61axt4k
- SHA256 c6e54c5c006da5ad027f8f02f694b90e2ae9f2e2d8073305277111de6d677be5
- MD5 2a58613e8cb82e47560a697ef8b202e7
- SHA1 84482545ed4c70e472be5c8fd4af4d3367f51c80
- SHA512 a7be0d502e3c10ced7ed5a42d515bf9d50fef877ac2bcfdb45b57d2a482338842ffe972acf3dd68761a71cfaeaa7df5df3a2e8ce9e26f1e385005c8ac652cf64
- SSDEEP 196608:j2/AqU4tfzpN/Yn7ghK4w8AMhYIWKVyJGsOQGvop43fwL3PzWC8RgM+M1Er:j3IFN/4qFAM+/KVXLQGvoCvqiC8dZ1A
- TLSH T128B62382F7A8E92FC43380338EBB0B3216498C559B5AC71785587718B9F7AE44E85FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener de.danielandersson.iptvplayer - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone de.danielandersson.iptvplayer - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver de.danielandersson.iptvplayer - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo de.danielandersson.iptvplayer - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo de.danielandersson.iptvplayer
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/de.danielandersson.iptvplayer/files/profileInstalled
- Size 24B
- SHA256 61a1a99c6c827f19f74325f2d95f46158b0974facf8def417e6bfbd51d41acc4
- MD5 f0ca30644b5e806b0a9cdccb8272e01b
- SHA1 59dfa7a0420a69d2ebadba264f8381cf392d0d80
- SHA512 1808d7fdeeb09d5a39da6cee6531c801096167bedcdbbc4626b0439f56e3e851b518926b1bd84e090fcfa563809d0a23b6ded8737e999a35f88b79e217a84dd9
- MD5 SHA1 SHA512