Analysis
- max time kernel
24s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260721-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system - submitted
30/09/2026, 18:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
visa-jobs-world.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
visa-jobs-world.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
visa-jobs-world.apk
Resource
android-x64-arm64-20260721-en
3 signatures
150 seconds
General
- Target visa-jobs-world.apk
- Size 947KB
- Sample260930-w2xesaybme
- SHA256 31481203ec093bdea0731c61acd808b7e45a5a183ab640164e8a9a01604ff80b
- MD5 84135814533f0a5e48ffb982ab0c6cb6
- SHA1 34cb6aa5b0a468a54ada8b88e3e519b515d7b997
- SHA512 9f14fa068a7ca547823c53e74e3dfcbc8794516cabee819e65f6390be2bb63a87141dd7ab485a63ee7896e1a5184e6466fe2aab8d039e52674b9ed17a84586ee
- SSDEEP 24576:v39DP8YEv3zb9i8VlqxJl7eOukyvKN4wPPk9TXsH027f:v3lP0v3P9FqJlyOhAKNsL27f
- TLSH T10E25E0BA7A1F7DA7FF7F12FC0B318A95883809D49BD0417C897912C6096161B88BF974
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.po.visajobsgulf - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.po.visajobsgulf - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.po.visajobsgulf