Analysis
- max time kernel
47s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/10/2026, 12:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
snowball-derby-uitest-debug.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
snowball-derby-uitest-debug.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
snowball-derby-uitest-debug.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target snowball-derby-uitest-debug.apk
- Size 5.4MB
- Sample261030-phpr9sdv2q
- SHA256 76f9977ff23eff9e691e942896cc119ae6c9e4f86d45868f053cbc49a30107e1
- MD5 57053a58abfd6d74f2a3f60feec62a5c
- SHA1 7c8d770b5d2a713fd5bf1aa88331644198cb8ce4
- SHA512 8cbbfe96e328f7c903f64f25e71390e098e383be99391465c8f26f06ad7cb3d1182b8296c68804230e17e0162a08eaffb32136604d4cb794835dbf4db40e8e80
- SSDEEP 98304:IH6SneqAVkGocq3qOPvpD3eYqGo0zAGRUbUYQ/wKAj7F5r4OS9aT1iwoHD:uGqekGfv68t6hRv/wKQ5rI9qe
- TLSH T1E6462382E3E1AD7FCC7385321FABA77616A25E528552C3138528B62C5C77AC88F45FD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.osama.snowballderby.uitest - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.osama.snowballderby.uitest - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.osama.snowballderby.uitest - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.osama.snowballderby.uitest - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.osama.snowballderby.uitest
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.osama.snowballderby.uitest/files/profileInstalled
- Size 24B
- SHA256 899bec75aabfee3454d07f2f72447c3a326020a43b2b12eb22ebf829cb8658b0
- MD5 e060ce87c52144bac47f5ac8a87ca8b3
- SHA1 58314461a9e05387511da4b0d415ea029275e42b
- SHA512 9437143f8ee5830f07cfb08cc210353138a48bf582931f45d5767351eed96c1a6c963991f996e98e4ddc9ca3ff0f4ff101fa5d8d6aa25eaab8348513a69cceb4
- MD5 SHA1 SHA512