Analysis
- max time kernel
80s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/10/2026, 12:11
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
pesolucky.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
pesolucky.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
pesolucky.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target pesolucky.apk
- Size 1.0MB
- Sample261027-pcmeys1w2m
- SHA256 4d4bd27c3f4474b6c3480e91b62af70609ca13e72bf5a2a9f2504b9e84bf0d6a
- MD5 568c389ed7825ec41100e4ee56eefdba
- SHA1 46840d4baaa6101526bf367cd0c20b07b9663548
- SHA512 d2b8847846ef5c6ae6d3949197140871d4b7e69785cae5dee0f21573a9f45003aebb4fef05db2bd5a365b9ff15c01c62e98d677f33885de36a6223c43f8c74bc
- SSDEEP 24576:1N7xfzwWiFrIIua9GMveMr+Hx/bEhkKeyFZ:TNfzwxR9uk4jEbZ
- TLSH T1782523C7F77ED569C2A70F32CDAB66226331860C51DAB11BA1153B183C3BB0D1A2579E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.pesolucky.casino - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.pesolucky.casino - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.pesolucky.casino - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.pesolucky.casino - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.pesolucky.casino
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.pesolucky.casino/files/profileInstalled
- Size 24B
- SHA256 9929c7c47364c1ca549a4434d87a501e5e921c3d3e2b900b253dfece799094c1
- MD5 aaa58a577914677a20b35003e35aeb91
- SHA1 1a3be0fee36b9bdf9d5d284640a9de541025482a
- SHA512 e7575bf4e1d381380fc390d1f7eef414568a2c24a6f00aeeef2d1145579b010bc6885336ea49ec2fb7b2cc0384cabc664d49abf439524b7718d1e6ba75bc5088
- MD5 SHA1 SHA512
- Path /data/data/com.pesolucky.casino/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 45486bf106d21798978e76b360134c8ca82b4566f45a771e1e9b60a430de6327
- MD5 2cff936b586fa4c322c0cd59972a7b18
- SHA1 eab3987e888bd99e21d2ad0a6ff54a7fc8d8f136
- SHA512 c18605f10f3e31951021d890b4d7a436bba60c27217d5ee74246f0a55a766ed5428235eac11598c69aa4269a9f6abc98b6a5dba55418f2106fd54ac555b02f2c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.pesolucky.casino/primary.prof
- Size 85B
- SHA256 0787e60df8bd53b6daaae3267a020cd1ebe8b8e43f6f533f9cd3be36fd018227
- MD5 ff43008061a0250640a56dd80c0274b0
- SHA1 6ca9fb778799acb3c731c1ce01904d821616a7a3
- SHA512 48af9cf29ce582fe19f4c21dbf6a024bb98bd2b2302fdc8a880ec410302c8ea2ad5326c4da5fc2dc03abc7f32d2db459ecb6e3c870855c3029ab5def1bf9cd4f
- TLSH T1D4A0128988103B84402AD1252161D14512CDC28451094680080D319C0E40CC0E1D687B
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.pesolucky.casino/primary.prof
- Size 309B
- SHA256 059684fc5eda3e3751d710f8be60a2bc09ca5cfe200443813b0a488ea9b29c77
- MD5 37a97470afa1cf3f6b899f7b0d6e60e0
- SHA1 8d6c1f7e2a3f477639994f046c76bd4c4f7ed476
- SHA512 f0489e10bca54ef91e22a203f816152a0c1c15c05a89b181f5a803bf5abb58280e6ab4e03548794f1b5eab25609f641d370a28721138b899bcc63c0bda5763a5
- TLSH T17DE07D070069C583E445A21A8AF94C88CAE16415A7D7A4510FD00B562257A112769025
- MD5 SHA1 SHA512 TLSH