Analysis
- user interaction
yes - max time kernel
47s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
24/10/2026, 18:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kremlin.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kremlin.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kremlin.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
General
- Target Kremlin.apk
- Size 22.2MB
- Sample261024-xb4xlsbx2x
- SHA256 52fdaf3b92d60cc2bce101ddef2024a312c9bfd572bf638388bddf7b813ddd8f
- MD5 4254c8689e022900c6d542bf1ef8e009
- SHA1 7e9d12f092bd3ae074ebc01e34ed6edbc5f852bd
- SHA512 670518220a49468872fd98f8edf8b3f4cd13f3a540fff710945394235ee4c34278fd279b8b18853b16a8545219e8f2dfd088eee632e033da06f66d4e6c1f9e08
- SSDEEP 393216:ApG997ei1vE988SMJfryzHqh49dcE0w7sfqDzk6fUfDt:L997ei1T8VNQKh49dT0ysiGbt
- TLSH T11C3733C6F798AE2FC87350328D7A57B6055A4C625A43DB836908330CB9BB6D44F49FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.kremlin.tv - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.kremlin.tv - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kremlin.tv - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.kremlin.tv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kremlin.tv
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.kremlin.tv/files/profileInstalled
- Size 24B
- SHA256 a414e61fa3cfec8b844a827c53c9198dfea18eb1818ca5d5a1684391531d2e37
- MD5 fc068972b16244e33dd352eae2e9f281
- SHA1 df76346d77697f75cc14462289772885135668dd
- SHA512 1e50b5dd11e2738761a1ddc70cbc85705ad07c9305ce2b0ad6f2b19129599b690505aa494daf15a747f120339d557b5945c3891bed9d2738837f30d7f7b540d4
- MD5 SHA1 SHA512