Analysis
- user interaction
yes - max time kernel
55s - max time network
59s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
24/10/2026, 16:13
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
SMS_SonicUnleashed_Samsung_GT-S5301L_IGP_LATAM_ML_100.apk
Resource
android-x64-20260325-en
7 signatures
900 seconds
General
- Target SMS_SonicUnleashed_Samsung_GT-S5301L_IGP_LATAM_ML_100.apk
- Size 1.6MB
- Sample261024-tpblfazy8m
- SHA256 f3bcc0fed24590490db06ead26d7a0f9f53ae8c835322f4cd8e40137c6fc0b5c
- MD5 fc8e69c5cd2a76e0fb2958c4079b2858
- SHA1 852a01e39d5a988ed65145f373937ce883bbaa46
- SHA512 802e47b68b9e7511cf12efc4fe10fbd5803281cb590a306488bfde62845c79277f85c0455f2b567484a6f5e9c0f94aed5ecf1896ba8b93294b5615970c5a282a
- SSDEEP 24576:cva61BjwfJLU6thvYCuotaC6AGIgKtgqDmFWspcsGYZRiDHmHWo1eqAb7m7pzKhg:mBMfJLU68Cu6vp2lbib4Fw3m7pzKC
- TLSH T1F075AE5167FD5606F6F3AF31ADB50261193BBDA2AE3AD21E0200315D0D76AD08F64BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.gameloft.android.LATAM.X462 - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.gameloft.android.LATAM.X462 - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.gameloft.android.LATAM.X462 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.gameloft.android.LATAM.X462
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.gameloft.android.LATAM.X462/files/Demo_RecordAllsNames
- Size 4B
- SHA256 1c320a1b3a76ea8fde873cbce667790a27a16d196df1a1c66d7b10df16fba0f3
- MD5 148c51b0d3e247a1e3d83b5ed8c8b0a8
- SHA1 60a25d2478a3b03f7ac82a898df4e81c98b99e3b
- SHA512 4fa50e5b6ada0480d654069512d2d1089f0e13a2611736d9fe712b7654fae83cfd3ab8b7e2c82d35bc6a6499903bf709dad5e3ed2d39dbcdc88f711440d1a69c
- MD5 SHA1 SHA512
- Path /data/data/com.gameloft.android.LATAM.X462/files/SndDmp0.tmp
- Size 5KB
- SHA256 692edf7952984ad2303d3ca9434a7d2d3fa4d3544207e1688a6cbfec774ccf46
- MD5 e8e169eda3c52ef132089a9b435e505d
- SHA1 0194c88d0bce2f31c1c1ad9efc5948dcd72c3035
- SHA512 8ea1963a82e2df642e6a4f16d16ec321f60e7eca7ba6d8c875e30bd6cd19ad6a4d4ae47c5f1a7c9c4ed683e518b62c6f8672071d0b653951cb2dee8ea7abf5f3
- SSDEEP 96:+CoO7MN2BoyWAKTxLiPhmTL3gD5hY0k2XcpSaijIIVWwDh12ccwqME8:+CoOVBoyujTL3Gh57o8
- TLSH T152B1532F512C4158EEB070B9BED0646230DA9DE72AA2337E95090343B39553458EDDBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.gameloft.android.LATAM.X462/files/SndDmp1.tmp
- Size 1KB
- SHA256 eb08414211ee27844eb1c71c4b7feff2dce7100d2c6c05467164c0119c021ab2
- MD5 dbea389ebc0ac16635dafecc11d60d21
- SHA1 842102c8b06b79dc8019b18cf219e682cd87f0f1
- SHA512 fdc2cd62cab1c9b128ae175bd120f5bc45774b28518e58dae9646daf39dd8a9475e7c584296053a507cee87af3b73abdbce3dcaa16fdc1ff10533e35efc885c0
- TLSH T16F1159F89A150AB4FDFD9FA9053F44D9CC7337D53558B0030097FABEB42A1A2B888904
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.gameloft.android.LATAM.X462/files/sn
- Size 1B
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512
- Path /data/data/com.gameloft.android.LATAM.X462/files/sn
- Size 1B
- SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
- MD5 55a54008ad1ba589aa210d2629c1df41
- SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
- SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
- MD5 SHA1 SHA512
- Path /data/data/com.gameloft.android.LATAM.X462/files/sn_1
- Size 281B
- SHA256 136b6589681bd7d3fbb43375dd06d9ff3db569bf399f8e72fac9781d46c9c9d0
- MD5 3908025118b7e525ad36819c1455a127
- SHA1 bd858fbeb925a1743fd8cfd40aefa4a581afeae1
- SHA512 607263c832b2b906fc7a5bcf6fa6e7819d6a3216c96f6a497b74abaf7b3ade3068d054e1fabd3229c9f990275a137455adaaf7ea6938b641640854d2e64ad6ea
- MD5 SHA1 SHA512
- Path /data/data/com.gameloft.android.LATAM.X462/files/sn_1
- Size 281B
- SHA256 2dc9ee03ec9cf8c834b08b04d05ae4d841b92bcfa5bea332d78b047fb7a98ba3
- MD5 f03da76df672beb4906f9192ee669b6a
- SHA1 00bae199791918c953f70f07a3c06778029d1b6d
- SHA512 fd59a2b3a02c151967f91172ab4be7eac8b9b9c880d95cd5ea3a055741288931ada3cad13696d9fbc13abc912ae59cbba960f7ce685c95f4b105818035263d7f
- MD5 SHA1 SHA512
- Path /data/data/com.gameloft.android.LATAM.X462/files/sn_1
- Size 281B
- SHA256 68a1af182e9f028f1dc81707d2e6ad635e6ce44f1972b24ef0b4860e02e66562
- MD5 942fe262b5ada56dfc1c29266f32a6bc
- SHA1 c21247aebc54c72ce0c5f2d71727e5fa1d43d517
- SHA512 2d0e054b9442c1d1553e463fadfb6629a7424fd5727b4382403b04d420a16ed96edf5cb002132823afd19cc6b30ddb26b17a628cc69a1575015042fa2052abec
- MD5 SHA1 SHA512