Analysis
- max time kernel
7s - max time network
153s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
13/10/2026, 06:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Kotyx_64bit.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
150 seconds
General
- Target Kotyx_64bit.apk
- Size 44.1MB
- Sample261013-g211msgx5v
- SHA256 7e7b9b2e4faf5d29ee1b320b8bca78d75e915d060ab8fc028753d0fc802a7e45
- MD5 f2233b4bf72fb9d2eb90f83743588f30
- SHA1 bf6a90f6de281b67b18aa60abdbf5f37a14e0343
- SHA512 c5628ed7c104d7789e15f11d0d5095bff98f3e4f0e9b18fa926ae5559d1b5a539d810d20f9f650264ccff1e1ce76c890f7e1a3552de34955cb6d4be724d9ebec
- SSDEEP 786432:lMxOBf013jn+XHnp+MSS43JgfiLfwHGkl8UQo9MbHyREMDgt1vD1jEx07rqX:lojn+XHp+MSSraLfwJ08Dig0rw
- TLSH T1A7A72316F7150C32C5DF633A2DF603966B3163A7AA4383417E94AC5CBCC32D6926DA9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.lumark.app - Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lumark.app/files/profileInstalled
- Size 24B
- SHA256 ec2a9a270c544a51572320a2b93c3197d6b0086cc95d243dadddc2e1981bedf1
- MD5 29a241e028432b11129dc195b8a0c5d7
- SHA1 6a793fb5b91fc2481798591088f306f507335061
- SHA512 863f4d4c638e3bf5f2ca8d1a24f2bb60d6d82a3776a5a44dd0f12c96930466fdbd51bf00a1522af92de21b974b7e2a646b045abf1dcd8a070cd7004bf893c348
- MD5 SHA1 SHA512
- Path /data/data/com.lumark.app/qt-reserved-files/android-style/320/style.json
- Size 180KB
- SHA256 78677afb0afc0706d28086a104baaf37b96d2e25411e2f5261666dc52cc64224
- MD5 e26697c499d086f62885626115a9e1af
- SHA1 0cd8f5c7a8ab77621882ed5dc1a3792bab2df2da
- SHA512 77cdb0774621c904ef56a0e1f47e198aa13d33a1b81af6604249b75059640bbb063ddc8937ea45d997a82f87b08ce55585fc8a00dbea95b738a338c5a7b978eb
- SSDEEP 1536:oHcrHyr0E8akA5KvCTMBwd9SXgXg5O5YkA9rFba5bvCTMBwd9SXgXg5OCmIv6NAF:m/
- TLSH T1F804E410AB1477ECA2EF941DF0B2DB8623F6B553179E27B194D608CCD095BA14B2F0B6
- MD5 SHA1 SHA512 SSDEEP TLSH