Analysis
- max time kernel
47s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
16/10/2026, 18:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 3.9MB
- Sample261016-w4mncsa12j
- SHA256 f2dd15a536ded2352da5a9b1fb0d5edde1929fad2d414edfd073377492973ae6
- MD5 a810b0666e544cb90810da2cb0d4e795
- SHA1 b89bee904d829d758b5327038d4ee242f2d60bf3
- SHA512 c4e867d333503bed35b10c878c2c0c8db6e749eedba67fbce3a3c0aa621ea227676e70308b7cd7b0dfa257db0bf8c81277aba867c217fab7b779e7c5fa1c4abe
- SSDEEP 98304:a6ep6m4ZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCGM:a61lZjJk75T15b6tUk6z8RdCP
- TLSH T184161242E3E56C2FCC7782365FFB976916818E02CA96D3038A68721C1DB7AC44F55BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.cclotto.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.cclotto.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.cclotto.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.cclotto.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.cclotto.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.cclotto.app/files/profileInstalled
- Size 24B
- SHA256 db2b007dd1db3c0a17eec5d9c894536c5b8848f15d94062ad5836a68365b3db8
- MD5 37bd4a22dd78ef2dcd7a8cc19adf414e
- SHA1 8be2e23428fb410a55c8c053f698fb2a6c102a31
- SHA512 689c1dc34e412be8ba4bba2e6074acd98a833092308de9f259389a66c4426da4fc618ce08abefe5fa73a84784886b6c39e43fbe644287a5ba17b90df6d18f9df
- MD5 SHA1 SHA512