Analysis
- max time kernel
22s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/10/2026, 06:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sellbino.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
sellbino.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
sellbino.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target sellbino.apk
- Size 5.0MB
- Sample261002-g2fdyatzf1
- SHA256 b56247a3fb20da95dbd3e1bcd878db71d67955ca51d8d1145928175090227f46
- MD5 bc8da8f1bcf81dcba271a0550e1c8ce2
- SHA1 e1f7a404c8d1e90c4c5fba4e9e15dcc401706165
- SHA512 ce8d4d12b8c82b50b2fdb714ace1b7bb0b56d7f9383308a1f274eec5b47b80eec87e3ca8cf4ed1cb410ee6389de13bb8e2caa36c48b6df83877daee400a15706
- SSDEEP 98304:cj1AQO1mvRySOTbtsIYMndBtKQzqEctKtkW3geXUamY3tysecklTM:E1O1m4nnt9YJQuz4Qi9cXK
- TLSH T1CA361282FBE61D2FCC7389360F9B1275561A9E07CA83D70B49A4762C69376C84E05FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.sellbino.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sellbino.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sellbino.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.sellbino.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.sellbino.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.sellbino.app/files/profileInstalled
- Size 24B
- SHA256 4a716130bfb31302954159139c67185d6450ca6c6403110c5bce45f70639b69a
- MD5 ecb06c97c852062237ca8c271db07d45
- SHA1 eb5f184f2e21382efc17387218ba882e46b0bfbc
- SHA512 a4b89ce46d5f5160fbdaee6a5c96cc0e132df68de01db5caf26b657e9225d1702a332d8a47713b72ca1ac67b4e6f6a380132134070c61ac737e4dd6fba2784c2
- MD5 SHA1 SHA512
- Path /data/data/com.sellbino.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 102352f6c10dedd4f804df368828994c36ea2e1bbbeb21f67cca25257aa34d2a
- MD5 64e138ccc50d6d0bae37739342b7f0de
- SHA1 0c858f9d1fa4381ea3aad30abe49ca3a68e5a73b
- SHA512 d655c497e5828b48bb58d2bf9b8966f39e4d16bd70ecfcc514f557f7ffb71550ab34ff4a93e24b0f71fc926e1527fd25e2ecee5825dc9d47562e2ba52efb7cba
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.sellbino.app/primary.prof
- Size 2KB
- SHA256 5841c37c3cfad10dff021342ed0b5315adabb18121a33bbc640549bc9eaa4344
- MD5 146eb50e26e69bea04233a859beb87f1
- SHA1 a820e411f35166720cc2aa551dea6d2a0dde0abf
- SHA512 ea5d293649d9f83641f85748a15b4adff01e1ff2fe17c4055d36d396f98de5d5c412764ef2cda9cd1f34845869cd86cff5736e8dd1dc27bde5aa82e735e6cfb5
- TLSH T1EE515C9BA54D35390203E63D27806B01D16BB311FE82E7206847D4B8C5A136ACDFB69F
- MD5 SHA1 SHA512 TLSH