Analysis
- max time kernel
46s - max time network
155s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/10/2026, 12:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
We Trade.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
We Trade.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
We Trade.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target We Trade.apk
- Size 4.0MB
- Sample261007-pmtxsagz8s
- SHA256 d26e399e4a1e7f5da50aeba19bf4b863f2b36c3e21c7903d855a40cc167aefe6
- MD5 48b27a531000d5a7b2a3755fdca08faa
- SHA1 c03e0dcb64387f03b3aa0ab19f11212c03272e37
- SHA512 9de0f257812102e53f9c11112cb688fd34b314a1a8c549c51d281153fa8d29169ce1ea84e901166e16278d0dd6417256c0e2ffa26fa6ca4906aba4039d79c3f3
- SSDEEP 98304:u6ZTkXN562HWqDFsuhXJP95gtogj7ztXGtGspTRA8mNK:u6ZTkdkRsqud5+o8zsyK
- TLSH T1A21633E6DCA254A3E3345D30CF53BE8A42487F9E52D266E7A831F046950EA7270506FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.wetrade.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.wetrade.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wetrade.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.wetrade.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.wetrade.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wetrade.app/files/feature
- Size 32B
- SHA256 20e052894db4a128a06b63b8a316c46c6194540c38912e1e214557cea2b1d4ba
- MD5 5b6273545f676137e298d5932a04e33c
- SHA1 b3f90439ccd7f95ff45c33910d7aa0cb71f8867b
- SHA512 0c3776d297e388cdfe5e8c3f33c70f48b4b15e87dce937d47631ace4e1489aed17e35af9c43fff930c04109b278c424bb6bd7548591fba9684a0b09a91077bec
- MD5 SHA1 SHA512
- Path /data/data/com.wetrade.app/files/res.zip
- Size 18KB
- SHA256 2dd11ac270d87b871a1822c7f389e9d0906c16b6b63e55d055544ab1f1bceb32
- MD5 24b74b662af8c527bd217b6ad783be3f
- SHA1 94b8c2c56bb4abe2d5cf8fb082973653a89fc9cd
- SHA512 2309834c94d0fd41fc4e47a356221028fe6616f9b42cba511aa04e288c963776867642d6181480abb07686f485e3a7c136f9962414620e24bad353254c8a310b
- SSDEEP 384:RqzldQ7ovJ7ELKzYJ54Geslh1EEe1L3DXzOmn/1J/7J5XkpRlM5BGdrQxyeKf:Ay7oRY+zYsGesj1ne1L3D5n/D/7zkpzL
- TLSH T17B82D009342D18DBE5BE58BBD95BA3C8D7A999D7805C7C8BE3D2A0496753C13210A6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.wetrade.app/files/res/favicon.png
- Size 5KB
- SHA256 95ab6fb6df4d126a1eae3ea00bd9f2dc886c4b2fbfd51bb95875e80f515f7eef
- MD5 dafa0f4faa6d81ad746700af55bbd7f1
- SHA1 aed0e74575e7dfd4af85f5e55267f0a360b5dbb5
- SHA512 fa2f5c15ea64537f72a4d423ff18059b1db6c3fc7fbd02f82466bf21ed3e6d428e226c7e7bdc6fc46615214d9e582d90f79515eaeef70da7a6d88949aabcab00
- SSDEEP 96:U37wD5BzEuLEuozeBU4jGagjZcSs6NcEQ8WKYt7FLhLk:U30EujokUnVcSXcd8WFtdk
- TLSH T187C12AA1BDDFE9221109162F321CBB068CB3FE07B0690341E66D313D486FE27936E4A1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.wetrade.app/files/res/index.html
- Size 143B
- SHA256 1434ff5ed34c8deb5bcd01f567a956c3ff58770567029f4e9f59a152e53fbeb2
- MD5 2c4dbbe30dc6d0cda40bb7e0e6fdbd1a
- SHA1 63806d8be484e8ba29fb6afe50ff651c6bfb7133
- SHA512 c5789d1c2a3eb484daf55c5330af7a8e51e6126932bcde5965e8f68e774c7c74cd5a91884415675891770819c130554d82d1dffb4336091891b3a4c81826d1bd
- TLSH T12DC02BD38C44CE1D97724052D820B01C05658C5C974E54C315C45D2A08DD3D55D7A94C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.wetrade.app/files/res/wetrade.png
- Size 14KB
- SHA256 0374428d8a3087ef6691027aa223046e06d64d7ed33ed3ebef52c15faa18c675
- MD5 9cd49f7b3968f02d2c58f88d77156a0c
- SHA1 af92c2fdd9bbad8c394a9ffe0c961f341ac6f32e
- SHA512 fadf8c275d09f7d6da47540ca1f66cd8cd325538607dc8647ca94c2206543a07c5f92a7a4a573b554c47933da877966602149f3599e57fdd3a2e256459f38595
- SSDEEP 384:1r5jt5z9RCscSfrCscHaX0HYIgKcslop7dDcge:1dB5bhcSjIHXHYf6opt+
- TLSH T18652C0B3A6C3C42AE79C72A01D6AE9FD923E14E31A1E1C0FD0DD75B623E52157B14650
- MD5 SHA1 SHA512 SSDEEP TLSH