Analysis
- max time kernel
138s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/10/2026, 05:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-debug.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-debug.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-debug.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target app-debug.apk
- Size 6.2MB
- Sample261027-ghrb4acg65
- SHA256 c3654b4706a35ac49a1ae2ad58e7b9762a22bbed9d08d9ac7ffba8c64fd46f21
- MD5 c3281bd6fddbbb3e8a7fe15235522b57
- SHA1 bf7b80180b33026fb303f2b07888f11e750e30a4
- SHA512 f4fc9e1e05f1a56082d8dff53d75d7991da27fa8a6ce3e6678aad6145150c9c196c9ffbf9a84c58846189e232cc2399b0c9a609bbf71ee962326babc711f4a5b
- SSDEEP 98304:LbUoewKyDZaLtLFGQ8lolnpRr/wIRQB7BWMZMBNFpCxnO8ftRrz8UC:LbHNKyZItLEBavEWQ5ZMLXz5
- TLSH T1EF66F18AF758D92FC4777032497A5731528B4D128E83DB9369583E0C68BB6C44F9AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.screenshare - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.screenshare - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.screenshare - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.screenshare - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.screenshare
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.screenshare/files/profileInstalled
- Size 24B
- SHA256 5753e50823fcb65f3c9f6b2419cfa31cd873e045b912ced975a99185aafed6cb
- MD5 102b366c924bc2f929ed1013a4e2f1ea
- SHA1 27b9d7ae81f424df4cce6490940f54abdf046349
- SHA512 a0084b523385449a06b4251152798241a4b6fe97c34a633311982725ec8be35827647cf3face008cf2927dd54ca31d44cc3a4fb4bf2f850945989f517782f972
- MD5 SHA1 SHA512