Analysis
- max time kernel
46s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/10/2026, 00:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
E.-v1.0.0-universal.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
E.-v1.0.0-universal.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
E.-v1.0.0-universal.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target E.-v1.0.0-universal.apk
- Size 4.6MB
- Sample261030-a72e2avsfx
- SHA256 3e05db78a393a8b8694c3826893b04a38d5eb741c4244fe497354903e46dfddd
- MD5 ced614a79fbc6ff3e8ac49fc8a99a42d
- SHA1 a45c1cc1f24f5b9ce2d42144eb45d9ebef031fff
- SHA512 eecad1cc0355df304b441ac2571269156370cfa057de487528f870c5151166640eac740bb1285f4ee460dbfbec6a850c5f779a760b738256ac190b657c71c71d
- SSDEEP 98304:dB2M1d6eH6hFv5vFhbHn7P1QtA3/dYmz606ScBlbeMqCv0HgRYPNnyEiOtoE:aM1dZ6/ZFxH7qtk/dYml+8MU7PZUOV
- TLSH T1B6261282E7E65D2ECC7745364FAB12305666AD078693D70BB95C322C2F3B6C44E64BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ednovas.donguatv - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ednovas.donguatv - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ednovas.donguatv - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ednovas.donguatv - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ednovas.donguatv
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ednovas.donguatv/files/profileInstalled
- Size 24B
- SHA256 b95d31d0c9ad555816093a4c81d6c912908ce2b8646f691105b043254726f24b
- MD5 679dd75273b4edc94f9105aef3693cca
- SHA1 13fe281a8a284bb331bb2a7a635ddeffe4f4ef19
- SHA512 206a6a1e369cb39a6021780c39b147ef82f1be4e71d3b0588dfc4e2722acbaab035b393d021c73cc7d8956be36752b66ba0757f9804301ed88f0155f48069e24
- MD5 SHA1 SHA512
- Path /data/data/com.ednovas.donguatv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 cc93b149f349874f8fd671b6fc2e88592e2be53fa9d3ebc084b229d022dc6c85
- MD5 0b008313d8761ebaa2513613de2bed51
- SHA1 a0a6e69e8bda5cea355cdfa5438ca5f37c7d8e94
- SHA512 e2a0fd6d2ef53339ca6e5c705c9958c66c85dac2a2425572a5889d02e8e8da471b5db0db76b9a325cc955429ae2be846cda47e6a90cca8cd3239a650f582ab38
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.ednovas.donguatv/primary.prof
- Size 2KB
- SHA256 40ab99c1fa4cc45e3c8f92aaf47940444101eaa15b770d03173fe3100f1f8513
- MD5 5a7815d4f204b32b9dab215b0ffeec98
- SHA1 640758851b5280f2f7c192189d441fc099854300
- SHA512 d08919ae269566800f4237723873468a293a2be7feba34f325c552b94e508620b4f885c27b57a5745958efc26bfa678a7869f29eee9280e9275ea2fc75b3dfdb
- TLSH T1F9511A60346250A6BE3D7C428838326F2C9CA16B351C79A8526CDF1880996ABB78B31C
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.ednovas.donguatv/primary.prof
- Size 5KB
- SHA256 f8570597f981abf552b02b0b7bed0968878a488a6ea37bb661c604112182e0ac
- MD5 fe98f84816e988b4fc752bd7bf39b1af
- SHA1 396ac8d4215a5d2ea47e278012c33d7aae73381f
- SHA512 dd3d16813685dfb2efae2353b117500010b004bc0f73354fa9a36cdeabd35c2efb7c09999c1618f52504099003d038dc2a0bd952a6d1d43dbf6e9dc62d9cb7d7
- SSDEEP 96:ovMEcBj3C4HJ7QWjyBDu4F2Dtih6hAEvmF7Vist+m6Nk+smFSHE:fEcBjRQWjyBj2D061Qse6NIHE
- TLSH T1C9B19F9BB182243130A08212EA4957E1569FCC3BDF764F550090E14026BD6BFBDE76D7
- MD5 SHA1 SHA512 SSDEEP TLSH