Analysis
- max time kernel
16s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 00:11
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
KingdomCleaners.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
KingdomCleaners.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
KingdomCleaners.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target KingdomCleaners.apk
- Size 286KB
- Sample261102-agsefadg35
- SHA256 761c44629f24e7bf11e3270cd0142b43d04943c6c9305d1f135535df50d6739c
- MD5 3c34d1135a538ea6e34cb1adb27016ec
- SHA1 24cf5f7b3b4d1c79e0997f55481565eadbc90479
- SHA512 ac74c81e87f857341132364d6e1414d35e6048e0333a1bc7cc3b69fff5f227bd097fbcf64180407672e1d80d0e65f1ad18a3b56e045c973274fdddf2e9355af8
- SSDEEP 6144:KkCzXpShhl6mTnT1XiC96bv7nsIpMtOwdXnIrnDprGINsK+G0/oSAst:wpShLPTnT1yC96zIXtRIprGesK+G4NAk
- TLSH T1F0542370A25BF214FC17E3B2C5610733A83607A7D096399EDD12A58928CFEB9573D287
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.kingdomcleaners.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.kingdomcleaners.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kingdomcleaners.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.kingdomcleaners.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kingdomcleaners.app