Analysis
- max time kernel
23s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
15/10/2026, 20:02
Static task
static1
Behavioral task
behavioral1
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x64-arm64-20260325-en
General
- Target b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
- Size 9.4MB
- Sample261015-yscecsct3t
- SHA256 b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9
- MD5 6ed6cb2cb6657b41fe075d95f3799038
- SHA1 3df547004e5649048dd4b101ce9c0e777c7a9848
- SHA512 2b9a0df8a9dfed13ab32821d6655b10a040248542f9bac81b72dc41e9a4c3fdc678d2e1ce5160eea44b9c5c555ba140faab1145c357868782c06091adf04c46e
- SSDEEP 196608:SWUZ1THKEfkoD5BDeDDEnNkesgxrUvgkXJvGmMTQMPLl7hSB:sFHZkCDeXy/0ZvG02l7hSB
- TLSH T174A62317B751E2D1F830C1366A060EB7A2D59D106540B25A36CCB7FCABF3D988F886D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.TatToNaMa.odieapps - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.TatToNaMa.odieapps/cache/1582435991586.jar 4844 com.TatToNaMa.odieapps - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.TatToNaMa.odieapps - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.TatToNaMa.odieapps - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.TatToNaMa.odieapps - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.TatToNaMa.odieapps
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.TatToNaMa.odieapps/cache/1582435991586.jar
- Size 9KB
- SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
- MD5 e8e0527a01aefdb89afd2c508f131da1
- SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
- SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
- SSDEEP 192:uGJqbQwgQYuNUnEV4bAa0s/ombgmdxjX5fGpTVHb3qX:LkMwTTNdlns/ombJB
- TLSH T1C412AEB4BF77093CD0DB0DB8CA67E800A05F25841AA7D514E0656066BFD47B5F1E315A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.TatToNaMa.odieapps/cache/1582435991586.jar
- Size 20KB
- SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
- MD5 fde2ee00cbd121cfab5290b078aa3ceb
- SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
- SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56
- SSDEEP 384:Za0jn+huC5sMvRuvypj6f2ZzJgm+poK+l8m4qxXpj/7wyxBLBiok+9VQ3AKm8:ZU5sMvu/f2/gm+pDAPzj/Dip+9y3AK7
- TLSH T1D592A457B3918563D57CCD3F3A3ED390EB20B210CA23970728459AAEBDEA3D525D1AC4
- MD5 SHA1 SHA512 SSDEEP TLSH