Analysis
- user interaction
yes - max time kernel
173s - max time network
226s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
02/10/2026, 07:11
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
3a9163ae6e3f3bc79d627f5b1ce6b171601c3589c35885b3d2062f9f5686f53f.apk
Resource
android-x64-arm64-20260325-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
3a9163ae6e3f3bc79d627f5b1ce6b171601c3589c35885b3d2062f9f5686f53f.apk
Resource
android-33-x64-arm64-20260708-en
6 signatures
300 seconds
General
- Target 3a9163ae6e3f3bc79d627f5b1ce6b171601c3589c35885b3d2062f9f5686f53f.apk
- Size 17.9MB
- Sample261002-h1ftraws2k
- SHA256 3a9163ae6e3f3bc79d627f5b1ce6b171601c3589c35885b3d2062f9f5686f53f
- MD5 9c8f39038bfba2f22f2621411358cda5
- SHA1 98a39bdd046e34c3ef9b860ba46d7df5b610b0dc
- SHA512 f8086e5a78c2edd162854dacc4acf92968b8c96ac06b13ba1e255b639bd1c564c4bef14339fd4b6ccb364f82d774eb45e35e677c616c8283e55d0da483169239
- SSDEEP 196608:lKinxKl/8A96jPp7d157TVoCUnG9MOE0/yWHUhyLuiubpD:lnxRKaPp7d/7PUnGWOtK4pu9D
- TLSH T1E717F1DF630052B6C03E2633545526B7A3B78F0506C2878E2179B329FE366751BDFAA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.uuodgvy.helperihg3b/app_dex/classes.dex 4141 com.uuodgvy.helperihg3b - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.uuodgvy.helperihg3b - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.uuodgvy.helperihg3b - Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.MANAGE_UNKNOWN_APP_SOURCES com.uuodgvy.helperihg3b - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.uuodgvy.helperihg3b - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.uuodgvy.helperihg3b
Processes
-
com.uuodgvy.helperihg3b1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks the application is allowed to request package installs through the package installer
- Requests allowing to install additional applications from unknown sources.
- Checks CPU information
- Checks memory information
PID:4141
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.uuodgvy.helperihg3b/app_dex/classes.dex
- Size 2.0MB
- SHA256 e64d437972ebc0f1310538b0865e72b03c1a21f863ab9d5f38ca9231dec7bc70
- MD5 a08d1d7a69bf21c2bfd42051929e16a1
- SHA1 4d72eaf03f0d0a7548308227a819d063b9f459f8
- SHA512 c4068e19c4f3ed3efd441438b3643f128d8abb672786e1fd1ced9fad395fc1a053bc32bdd776d8b018c4ff0a92e7f6b10c709c17a944dd7b4c66358434a5db0b
- SSDEEP 24576:8hw2rCFuytbRB0pJBkEmbe3yUAX6jSJ73HvHfdwSIUNN4nxYjk8pOmP3/Cd5A2hP:Aw2m8yXpfqw7394+jk8pOmP3qn3h3f
- TLSH T17CA55A0EAA434D27F46F227F7DB7134123B76549BE834F9A214AD6B87C832C46B96344
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.uuodgvy.helperihg3b/cache/classes.dex
- Size 856KB
- SHA256 94a88dbdcdb4377ec8891e10a7159b8ac5e6abdb1adb32494d3aa37bd13cf92c
- MD5 bc91559dd31b8c7e6bc143c213e87bf7
- SHA1 1462659b9e535afb2a09c340ffefd8aa7847a518
- SHA512 a11525cb7d51dc0eb1eac8a9a375226bdddafd5cbecab02e7d8cff7aff01d45ec173c0f8f7fda14db1d0cc318c9d2286a153a8d3342b6a3def65c408456b497d
- SSDEEP 24576:4kiYATB9VxhWUMqYzn7bPsnotnBBsqyZyBMg:YY4B77WzqY77bP7t01g
- TLSH T1C21533CA037C1FB82A116EF53658435639B2230720377B25AFFD38B628A4D99CDA5F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.uuodgvy.helperihg3b/cache/classes.zip
- Size 856KB
- SHA256 8914bda9b8b17af0492800b1b502a7294748e802a57c29626eaab726753e2159
- MD5 dc9325332be60fd7cb8c5efe99519ceb
- SHA1 1db8b381e66196d60cfe38fef46410a1dc6aca7a
- SHA512 ce1171f661cbdd9223c43d8658eae598c4f4b8b6857b9d5c66f42e9bee34267f3d0eced974a5048357b571c95f2ef463752b8f2f550338474cae6d4401353b4c
- SSDEEP 24576:3kC2AFP/V3lWU2qYJF7VtSXWBxBnsQoTyFaB:R2UPd1W/qYz7VtJBw1B
- TLSH T18D1523CA037C1FB82A115EF53658431639B2230720377B29AFFD39B628A4D95CDA5F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.uuodgvy.helperihg3b/cache/temp_1790925166443.bin
- Size 10.3MB
- SHA256 00651dca6ab06d5a8fdc10c6777cdabd9fee0dbd0f043cef2f92497c6fd246e6
- MD5 f48426d1a7b0b28daf7b4e73bc3cfc42
- SHA1 8d62344a5f355c91135ed621990cd67af1fc6919
- SHA512 1f060f28250442d95afd866d960a567683f6d50374159614e184e8a632ed4304dd00b7fe8a7fbe4ced1c7dab1a8e787ed4623d191660ea2fa793e3ec81b8fadd
- SSDEEP 196608:Z0O/N7OuQjr/MLYjtse6UWRLRcp0FHKqtFR4acxxzA1J:ZsuQj4YjtbWRNRFHKMFIGJ
- TLSH T149B602142BA4D10ED1F760F385ADAB2052986C08A763D6D3BE74091D5893EE42F3ADFD
- MD5 SHA1 SHA512 SSDEEP TLSH