Analysis

  • max time kernel
    24s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    02/10/2026, 00:16

General

  • Target
    abispay-1.0.1.apk
  • Size 60KB
  • Sample261002-ake9aayfjc
  • SHA256 6f2cdb1d798b15211d3bc3d39f4036aae55550da64156f75bf3dc7abc50fa572
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • net.aioffices.abispay
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks the application is allowed to request package installs through the package installer
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5117

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        abispay-update.apk

        • Path /data/data/net.aioffices.abispay/cache/abispay-update.apk
        • Size 60KB
        • SHA256 21e2e9fc6501efee0b4ce29f5e81955e09cc2d53a1314a3aceed8c1c13a18924
        • MD5 SHA1 SHA512 SSDEEP TLSH