Analysis
- max time kernel
41s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/09/2026, 18:38
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Confidential_Biometrics_Verification_v536408.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Confidential_Biometrics_Verification_v536408.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Confidential_Biometrics_Verification_v536408.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Confidential_Biometrics_Verification_v536408.apk
- Size 7.9MB
- Sample260930-w92pgat1ft
- SHA256 c05dfd625baad1459e3bf5f7d08574d35ef63507ed5bbdd5f0077144acc84ff4
- MD5 f4d9ad4a78cd4b99eae7f6ba087c505b
- SHA1 51d5d0a7a053542220a56c17da8ad917833f2c07
- SHA512 6238cbb433568097c04d8f9bd7ce817d77abaf53c64e89e04ad3abe8bf1e048fe65de0222c9d6af89af5448b52c3800c0fe61f9381a5ef77f85a38fe8c4ac903
- SSDEEP 196608:lO1VfjhrgoxuBTF/PmxQ/Tg+kcE7hlJc8hTaF3p2/:lO15FlsB3mxyBs7TJmFu
- TLSH T110863366C75BC1EDF1DBB6760C748362503F10618B03A76B5E2B9631F89B9C49F82386
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener dev.akamai.worker.v435f1e7 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone dev.akamai.worker.v435f1e7 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver dev.akamai.worker.v435f1e7 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo dev.akamai.worker.v435f1e7 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo dev.akamai.worker.v435f1e7