Analysis
- max time kernel
22s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
15/10/2026, 12:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
math-explorer-android-v1.1.0.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
math-explorer-android-v1.1.0.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
math-explorer-android-v1.1.0.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target math-explorer-android-v1.1.0.apk
- Size 524KB
- Sample261015-pk4zzaaw3l
- SHA256 4a1889fde69f764bf0ef274f1a7b0aea3b8b9e81ca2c007d9c800e237248341a
- MD5 eb91319c16adbf2eaa4b86a6b98597bc
- SHA1 16c3522e0a14bce99be4c6a70e6c64e0007dff7a
- SHA512 dffe4092a2f40dc9914c24eb7042759eeb743aad526d06e42bc899566907c3e71064a95798a353a399da40e82ebf7f7ad6b0bec35d52079a2c3912b6170db5f0
- SSDEEP 12288:2W+yCQyjSovdveqUYn+f3DsZeANj2K2Vnn+84cmBR:P+yBZovdv/Pn+fT+eANjr2Vn+qmR
- TLSH T163B42368D46CB154F99A3B7B79210B148E5173116E24F61EB1F290113DEBAD0BEBE338
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener cn.mathadventure.kids - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone cn.mathadventure.kids - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver cn.mathadventure.kids - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo cn.mathadventure.kids - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo cn.mathadventure.kids
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/cn.mathadventure.kids/files/content-updates/pending.mup
- Size 567KB
- SHA256 2333c0b23ebc57757d50cbe35d613f8fd69478b97114067ea9886d20a97ceb88
- MD5 73a0b2d1cddc67da2b749678f380aec4
- SHA1 a14100f4556e906f1858dfa110466c40bb02cb01
- SHA512 928e9b69f287850a0b87a750e4c326332d75523a0c99374825af464301dc2a0c87ce5e3e265361202c9b31b4609c982b6e6f3a5c9cc40064e5907096973828d0
- SSDEEP 12288:xpn1lpuqoAgguky0bpQdveqUqE+OID9ZeV+O2M2Vnn+84GJ:tlpHvukppQdv/ZE+O6jeV+OF2Vn+0J
- TLSH T15FC4237AD828A160FF5A7A77793109488F4563017E24B30F71E2E0965DEA0D4BF7E21E
- MD5 SHA1 SHA512 SSDEEP TLSH