Analysis
- max time kernel
94s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/10/2026, 00:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SiMobeo.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SiMobeo.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
SiMobeo.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target SiMobeo.apk
- Size 1.1MB
- Sample261030-amdhgatzht
- SHA256 c2ffa58639873ca76699f23c483c27e7ffbc722b29c7f758447166c803704bbb
- MD5 b8a28948c7702419c7e0f986f0c22775
- SHA1 2d448f304abab14200465bb70c4b8d5ad7fa86db
- SHA512 83a01f6882335c8fa019c6fd9031040fbb4a6ecd56311b745f4ef2ee987a93814ec79bfe1dab8f80828ca95741a7645846e5be64f870f67469e8bf31a63f4871
- SSDEEP 24576:4m8pzu4mTr5nNH9x38i/L4akfLXAY7hF69e1LgMbGheAM:F85KtNkmL4bLQyFAe6MbGgAM
- TLSH T127452315D8AE5854E89ECD3B788F4CF640A713892DC3F71E09292C9268D3F6797206B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener fr.si.mobile - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone fr.si.mobile - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver fr.si.mobile - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo fr.si.mobile - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo fr.si.mobile