Analysis
- max time kernel
17s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/10/2026, 00:21
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
BitByt3s-Portfolio-v1.3.0.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
BitByt3s-Portfolio-v1.3.0.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
BitByt3s-Portfolio-v1.3.0.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target BitByt3s-Portfolio-v1.3.0.apk
- Size 2.4MB
- Sample261005-andjvszemb
- SHA256 f97fbad07b05d83897c0f57ca996148240a46d359f275aa51749355c8a3dfffb
- MD5 faf361382b78256b317fa6c74af23941
- SHA1 d186c2cc69117df07398686e59e7da30c0936484
- SHA512 b4246dbdd11d4eb6f012c3f175e6cc988396a972aa4b399451897fbfefc83ef4c9d25b05359acc14fbe7ce0e1b6572f21cc0dd5da7b9b51d43bcfa10f37aaf5c
- SSDEEP 49152:Vam4M2ai9+i4opo87Dm88NiTCJ/vdKvgUpNiIuXq4deP+xgGf0rN9u1M:VadMQRptDmOCdVKvgwInBeGG9um
- TLSH T181C533967C697076E773B57881893B2A5754DCCCC240FEDD40AAC90D6AC878103AADEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cody.bitbyt3s.portfolio.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cody.bitbyt3s.portfolio.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.cody.bitbyt3s.portfolio.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.cody.bitbyt3s.portfolio.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.cody.bitbyt3s.portfolio.app