Analysis
- max time kernel
87s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
01/11/2026, 18:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Dalilak-Customers-Android-20261026.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dalilak-Customers-Android-20261026.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Dalilak-Customers-Android-20261026.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Dalilak-Customers-Android-20261026.apk
- Size 8.1MB
- Sample261101-wvml1ach83
- SHA256 bc97b25ff511ea0be0de12b31d3e5459cf37c1383d74643c93fb3443bd093f0e
- MD5 313bb1d28825e8b0f04cec10c236a1c7
- SHA1 388e98cfa2197d2a535d6e82fd0a27a45f7afd9b
- SHA512 52b7745700acc962994fa1748b8d8ad0f13c105509cd3174b735eda51fc2f8a13a8b489076c9afeeaab3ad00951c51f26b451a55717c8bff7c9e7f9183986cad
- SSDEEP 196608:WdVQ4mhBRqOGva5jsJ66f+1KbIbcZvVGZd419ni:kQF5MyVsO1aIYj4dWi
- TLSH T173862242F7E8ED2FCC73C0324BEA073526479D128692D6579528736C797BAD80E82BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.ordrz.dalilak - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.ordrz.dalilak - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.ordrz.dalilak - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ordrz.dalilak - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.ordrz.dalilak
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ordrz.dalilak/files/profileInstalled
- Size 24B
- SHA256 cf115be7d0a79c18fa10a79bc13f6c9c055d9360fc1e5e64d511407783bbb604
- MD5 7173a2211a3d9a9b6e72fcd9daaaec7e
- SHA1 bf6c12c2e8eb2565b9cc63b56fba6a230543c30e
- SHA512 2c0d21a3b6c216807694678298e7c937b63e1ed0b9ad01a9a8a15c20fe58564b409d34ea26f94139944293750178d3196f460cd9dfa8d1d619d289f8364d4099
- MD5 SHA1 SHA512