Analysis
- max time kernel
73s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/10/2026, 06:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
voxel.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
voxel.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
voxel.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target voxel.apk
- Size 44KB
- Sample261007-gy63gstthv
- SHA256 ec264438f54d7920c0b76c3766a3713af77933a7bd740e3f3b03d22283d797ec
- MD5 e7e4316c46bdd510456f11128a1313c1
- SHA1 14a3394872d52ddc1fd600143ae7a84b63fd46a4
- SHA512 6f8e5cace5187899a1b966761c3579ca33a05049ff5da79cd6c18d352b304b68cad39d0d52cfaef9e1f269ecb300c3940ceea2d17311caeb35fda42610f208ef
- SSDEEP 768:UzksAIUGpvhBB+ui5eV6KlUGpvhBB+ui5eV6K1DtE4ByFhO3SjX:UzdUGpvhiMvUGpvhiMX5E4U8SjX
- TLSH T15823BF83DB6558FBD75E82705527EB925953C3B027C620274C209AE8FD587981E3DEF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener wtf.voxel.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone wtf.voxel.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver wtf.voxel.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo wtf.voxel.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo wtf.voxel.app