Analysis
- max time kernel
23s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
17/10/2026, 18:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app.apk
- Size 32.9MB
- Sample261017-wyncpsbw4y
- SHA256 45cf93401c44638a94fc7dd5b75067b0982da2bc93d1e2d4059e5af541fd1182
- MD5 f68073e17a28db8dece155279decb97a
- SHA1 671520f70c5a94e159be50ef5c08c4ea088207df
- SHA512 21ecd918a608438f34daa4d89af063171affb17c400e93c5475dd33102c31aae2fa5626d3f67e98b6668faccf28fc217b99b2038d05f0e9e7092b085e8c8da69
- SSDEEP 786432:aenLlIOLkkFJxN5JhqmlpxDKFKhCkFrjO2//13jzg:HnpIE7z5Jhqmlz1P1O2/Zng
- TLSH T116773396B3A1483FFC3718757B5B0561C21A6E476662D3D7B4A8B6B834372C04F84BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.niceshop.seller - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.niceshop.seller - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.niceshop.seller - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.niceshop.seller
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.niceshop.seller/files/profileInstalled
- Size 24B
- SHA256 d9ad07acac0ae29087802fe72cc0f296494da0ec43f0da738ad7b74c77a2fce4
- MD5 91babf21b717c61e4080c4670ef60b13
- SHA1 9a8333a36b934dd2c8ab4541eb5c1334b151910f
- SHA512 1e13523c7b99784418ad860ce39a4a21e1f5c0f5f22e036fb7b13b4322a7436bb0d6738df6ec73cae799ef32c95dd13fd1bf805ebc9a9e8550bf19edbd2ef681
- MD5 SHA1 SHA512
- Path /data/data/com.niceshop.seller/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 208fe7d1f2bd83337ed1c94a3b6c0ff715e122c4e2672c3973b7ee6747ace9ae
- MD5 92493c84526da863d9737bea02c56f93
- SHA1 998b704474fc76d57d3c9425fe582f5e791124b2
- SHA512 f77e4b2a742162ac3634caab5d820c4632ea8206e29a78b958d9e4b774b8803472ef21e2e87c921e819c4d19d8a830e7d05789474a9fca364057abebf11fcafd
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.niceshop.seller/primary.prof
- Size 2KB
- SHA256 7251de64ff4ae621a47d08b05d17b9bf298218a1891996e263a8a88214334007
- MD5 ba3083bcc32c6511fe2e9c5de5250de8
- SHA1 0ffe61024f2bf4b07cf854b4a1422d2c862adc01
- SHA512 2ddfd713d4c50e379fb8d31099ee55d3ce45cc28e025b19ebfab9a8753ecbb35acd20b792f436a5ff5c9a1297e49e9f7d2bcfe8761c32634f827163a134aeb2a
- TLSH T1F041FACA0A6D264D9117817CBAD84770697EB0DCCD3B0126B477050EADB952063E1712
- MD5 SHA1 SHA512 TLSH