Analysis
- max time kernel
21s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
03/10/2026, 18:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
satoshi-millionaire.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
satoshi-millionaire.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
satoshi-millionaire.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target satoshi-millionaire.apk
- Size 4.9MB
- Sample261003-w2n4eavy5r
- SHA256 cf0ed6efb5091e26ac38946f12c41cd7a44ec8cad50cf642481a4da77803335f
- MD5 5319538ea028a26805f5fc9cca66d37d
- SHA1 d79eaf8e785af9d2c26aaede922f0fcd40fc3416
- SHA512 645ecc46acdaf79e8016fcf026eb38961da2d1c158f78a67f69ee64bfb6e0d7463be77a7cd19b6be0a7c6a18f7ad21264f6ed3e16ae87aa421bf794b588180aa
- SSDEEP 98304:CxS16D7pSWvY223sB+JTRfFSepWFXRpo8ZtWfbAc/kZa48GtAJlXYXf4:0KWvY223s0hBFSaWpzoSWfbAcbGt4WA
- TLSH T1B9362282E7E52D6FCCB745360F9B027116129D03CA93EB0B9A98362C6C7B6D84F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener io.thebitcoindigest.satoshimillionaire - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone io.thebitcoindigest.satoshimillionaire - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver io.thebitcoindigest.satoshimillionaire - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo io.thebitcoindigest.satoshimillionaire - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo io.thebitcoindigest.satoshimillionaire
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/io.thebitcoindigest.satoshimillionaire/files/profileInstalled
- Size 24B
- SHA256 d9803fa3ed6bad88bd67699a0a4756f1d765c4011085b0fa900538d6455ccadd
- MD5 772aca1ba22d5955312201486ea729d9
- SHA1 60fa0b59f7e3d2459714eecb4db019df3079f033
- SHA512 cb6ef5064f598387b3445ee709a86ec22ac5dbd83c58ec757a745120bc878d9bfca84d62e98ea9cf3ddcce66c871d11fbb5e86eba908b565c01bef68f3491f0a
- MD5 SHA1 SHA512
- Path /data/data/io.thebitcoindigest.satoshimillionaire/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 c2fcaff6e1e951c2a0d11ba71a0f41e542c5832274017344fcf9959d48a29a20
- MD5 3d787e11168e086b6a54f50987d543eb
- SHA1 8eaf487b622ae0b30207907771073069ea31804a
- SHA512 7e5f44d3f85c6c76d8072405c1620847c85d56e604e96e94f239c2a5b8b64146ea6c98f80c655d6b98e65209536ee6ef53c75c010d04cbe1b0e3e4dab641be9d
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/io.thebitcoindigest.satoshimillionaire/primary.prof
- Size 2KB
- SHA256 71083582b7ca167684177e559083d4e4826610d66297e79d5d70c2dc41aa14ba
- MD5 6749afadc9ea39efcc6eed3fd5487f5d
- SHA1 bb01dfef0d78391975656d7f9acb9fa6144abda3
- SHA512 5b27e4676606c6b8cf6033b4836e45727f5cf92451dcc1d8d55804a5e7f2de863731cbee345ef20437cc6a967e16beb604ef43fff22308bca2cfd3913cb6fd25
- TLSH T1A7513AD747108A01C47BF39F8DD7A72127084841C551FB2A08AE7C49299483FE379BAB
- MD5 SHA1 SHA512 TLSH