Analysis
- max time kernel
274s - max time network
306s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
30/09/2026, 04:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
invisible_man.apk
Resource
android-x64-arm64-20260325-en
3 signatures
300 seconds
General
- Target invisible_man.apk
- Size 566.6MB
- Sample260930-etzfqsed82
- SHA256 78e575cf27d25924e357b4b117b93d188be8087fdd24f96a598360bef2fb54b3
- MD5 02d7ac1712a8f0e10ba3ba211c0530df
- SHA1 151c139e0dce1675dbcbf54b00b5fb8f2291e847
- SHA512 3032a716714301ffc525ff863c1fbdbb57482cc8557b5721121bfa5f12d023f07e57d062789b32d85a756555c1a7a91d329c2004d0ae8dc29d88a1b12b6d96e9
- SSDEEP 12582912:4c5fHIr226V9dGg9eKrUfDXVLW9BB+oeus573BmC90v8A1:R5vIK2skgUKSFLWXQFusXDRA1
- TLSH T136593305AF60CBA2F4A6133585468218CB3E1D4925E3D5DCB8AE7C5B6BB3F6DDB042C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.uu0485.myapplication - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.uu0485.myapplication - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.uu0485.myapplication
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.uu0485.myapplication/files/toumeiningen_sf.sav
- Size 104B
- SHA256 bdba53c7fb1a4296d3589003084e47598e37893d96f9b35146f5c3266b3d2888
- MD5 04ddb02915929a222e2d727ea9242949
- SHA1 618f1b65f9284e2f2b407793b287801eccf59484
- SHA512 86a7ff051dbce21f23c75eb2af2e96647b28dddaec6c12060b731d3c0397c39a44cf3c56e6c73b3e1af0a35f2e3091b73303ba9c4c8f474f7dc788e8d898492c
- TLSH T152B09280AA3B1C1E1842A413D188360602347C16A000728510D960E4A5288F20202A26
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.uu0485.myapplication/files/toumeiningen_sf.sav
- Size 154B
- SHA256 5a9f401e52ea0ec162717bb62aaf10ce010fb0830a6b0d396b81c6761f0a7ebb
- MD5 1f6bb81914ccc0564dc4fbc0dbbfd1e6
- SHA1 1ff4ae59fcf7e8c07016a61609c09ff0a7d0f905
- SHA512 4c00b53ef505f3f75ffc754c0c8797d605cd3d8906963562b51cdbc20a384efa72e6977f4297849b4f75457748c17263244790849f3f482221bc9b4bff5409cf
- TLSH T115C00184AE3A1C1E1852A823D1CDB70603247CAAA040728590A9A0E9A63C9F7121AA2A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.uu0485.myapplication/files/toumeiningen_sf.sav
- Size 197B
- SHA256 4eeea183a18c6bd8f536400def34edb9884c8d848b073248e395ca2971f15043
- MD5 170c0237d4639ad98cced6699c243f87
- SHA1 72666b506dee545e8c0cc3e4164562eaf5e31086
- SHA512 92658c37985d286536336b0cf2d91697c10d31d193a7a59981dbbab41f5413f3784c55ca420294d22356f10df10482858505f6d1a29cdcbc89b40630f792f3fd
- TLSH T14CD0C984AA360C1E0C42A423E1CE730613287C9BE0807381449D60D8A5389F71126716
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.uu0485.myapplication/files/toumeiningen_sf.sav
- Size 244B
- SHA256 694c44f41417966bdfa970867e75de19e2f7a88017e717de35518204ddaee57c
- MD5 7f314fb7ca0088e51f1c4ecd12b636e7
- SHA1 3421cfbd81ec719958d76ad2f313148c902f76f6
- SHA512 b57807d67abb59f6b887992e39ceed001aa3e5838ea8860f2cb6f125d31b10bad917b6dc48d4c7c0a4ae30c3aa7ab70cceb1ff7c24f122059509c0025f53d87c
- TLSH T1FDD09E486A361C1F1C82A423E1CE735513287C97E0D07351489D64D5B539DF71136726
- MD5 SHA1 SHA512 TLSH