Analysis
- max time kernel
108s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/10/2026, 18:23
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app-release.apk
- Size 6.9MB
- Sample261007-w1h6rss1bw
- SHA256 ae20f0d6ba5c1501bf1f3132bd88dee196f7aeac707320a84237469827010c7e
- MD5 b5856917b8a639f13a89d1af17babf2e
- SHA1 286899701cdfc2d262c9689e29b79e7f7630a66e
- SHA512 70f8e922f935a85661372eeee1be981d0b9157719f1a5d860c6fa09601656221a232abd66e79f081e4141cdea8b0faf11c1d9c34533cbd9c3cfe324c70d90320
- SSDEEP 196608:zgXHYNd7DKRo/7usBbchuGK0WRwTP64ay:qHYNkRo/nBwuf0WSTT
- TLSH T19A7602DAF7D85E2FC47710B18C7652B2164A4C22CA879F476548371C78BB6E80F89BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener co.median.android.abqzxlz - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.abqzxlz - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.abqzxlz - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.abqzxlz - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.abqzxlz
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.abqzxlz/files/INSTALLATION
- Size 36B
- SHA256 293ffba3ba8eebc55f0668431719480868be12d18033d889e8cddc3fd342f431
- MD5 8ef8881db0709d6e4a3d3ae51440aa1c
- SHA1 70e5bbe11326307a694d3743e970e6b58629714d
- SHA512 5314d659f1f5d1296197badd8cebb2c2fffcc22f66a1c63d38c0308ce3b8c80a30d850ed5fda03cd3258e665c1106531cbe88643706feb1874374d85560a4347
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.abqzxlz/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 bf219ef8df72da3c3ccf1b3284f40430c1dcfe629e695557dbb620b6f7d91c8d
- MD5 4e722e39b5e97a4938ef1a586b10bd97
- SHA1 ea4baef6d9ec5edf5e09cb92cd54fa273d00e38b
- SHA512 7f71436433539292b2e88dec9344ae88bda324a58cee9767f32376397ac18421acd5bb5bc9d35ab003fd2d6a7e6f01035c02fe598438516cec0be61815353772
- TLSH T14041F674CC790DB399C82864B2AE521F7A72225F1F96392DBB8C561C1F4C57F59B820C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.abqzxlz/files/gonative-config/splashpage.json
- Size 3KB
- SHA256 28fc1a102ad4d1cbdbe8fa507a5efc6c450ebef2f34c125a18780bd63bddfb4a
- MD5 0e245400d2b8226482b0f16214f88841
- SHA1 f9e95be6866ae2e2bf380998246d054218c22ec1
- SHA512 a7c307cfe74a8e5be8e6ff1cb4f8702c06913977c9a649e5d0549ec533be226c335c8ff8b1343b2727a0d42abb893b34c057deb38d6c0de60f87f4df98434232
- TLSH T1CD811A1C095093031E2B3775361DF91E82773B1BFDF42A962C25744DE0E1076C889D6A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.abqzxlz/files/profileInstalled
- Size 24B
- SHA256 c6cdc90bffce0331f55dcbd7f184d7293d848e86e991132587bde6ce48eea0bc
- MD5 8d08fdc837f1da19cd069ac8299b6ff7
- SHA1 f5a02a0469953ddc37310db5a3f7ace5bfdbc175
- SHA512 216251befaecbe2fe5d4bbc05a8052194b65db126f0bdf5341475631215aba972dbb7d6b6efa22a70e5ea373867773099f10d8d07b9d54919c7ee9f104b5fc01
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.abqzxlz/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d82c005d8c9e832201ffa71cf212b53b1e6763755ec1b3d3b84a5633c9c8b382
- MD5 140665ef13e313a02c94d2f153fa61e5
- SHA1 7f2445e70f85472a90f485d17fc07c146342a536
- SHA512 2885042c43caf91149c27807c98322cbc4e361ad0031c6cfea6d4cb5ac8fc77c1f562cf29dba1b0b86a4d2ed407c9b68d302ba40149a4d096282d180c1ae341c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.abqzxlz/primary.prof
- Size 2KB
- SHA256 996d5a337c0d2642dea77c8f1d9b737744f369b5faf9c27e69428e082229a190
- MD5 32f4d602f3517f2f90f8e2bac7f3c00a
- SHA1 d578307273b3dcd775d059312d687cfa0c4f2bda
- SHA512 e28e5f01bf3bb16d07a3d9542b1edb453a74619e27374d59a6069e5fd18e356d5985867a9de223afa670b99402531a6a59d2c326f0d482ce03c222df07d30f0a
- TLSH T1D5411A8CC8181F6FA85E4713EAFBBC5C8156FB2AAA776A050CEA01093D41D770C5EE57
- MD5 SHA1 SHA512 TLSH