Analysis
- max time kernel
73s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/09/2026, 18:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
viva88link.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
viva88link.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
viva88link.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target viva88link.apk
- Size 449KB
- Sample260930-w8fevatzaz
- SHA256 8a518534f731e80b6ed7e11a091521bfe97c0caae7f11d4d5178d4fbef336b91
- MD5 c1ca23be26fb53ab5947d09a74f454d3
- SHA1 61671b706b871c5ba26a9dc282badb2d66ae5d56
- SHA512 49b5addd91254ed694a320e61041e06e4df5e643b0e62e656a8b1eb060d2dc6aafe1692ba7ea39dc7518cf1590c64ebf2b7f1783f3e85551163250c8c4b4e46d
- SSDEEP 6144:tRGe0OLQRGe0OLfRGe0OLTRGe0OLgRGe0OLb:quV5iC
- TLSH T1ECA412C83F780937C9438172CB5B78660F68E23AB0A61D1A4613E0DAD9F65526FDD63C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.viva88link.viva88link - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.viva88link.viva88link - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.viva88link.viva88link - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.viva88link.viva88link - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.viva88link.viva88link