Analysis
- max time kernel
23s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 06:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
biscuitcat-1.0.0.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
biscuitcat-1.0.0.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
biscuitcat-1.0.0.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target biscuitcat-1.0.0.apk
- Size 4.4MB
- Sample261102-g3nfyaec72
- SHA256 3d5ab1ce2b7adee7fde65c4301ba19d455112d576e910991844df9cfc5b5d56c
- MD5 1440b8d734d0d34d8b6a6c045aa2c75e
- SHA1 e072f9bf3659a2a82db92ed35ffb64cf8c079f38
- SHA512 7743a579d82724c86dd2200df0ae8627f4654aa19276992e1c6daa9da088ed8e3e34d14884c2ae5274e8d18178426718ecd0cf8a08991a93a8eac7881a374378
- SSDEEP 98304:N3gg29XyxH1fxe8/ULkHDDAVAiDZ6YdKId+6wRNYWj9UINAvp+VNV+O3kO:N3glQ/xJOAjil662NYZ3vpu/+Or
- TLSH T10E261282F7E66D2FCC3708364FAB027152169E13DA96C70B8894326C6C7B6D44F59BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.biscuitcat.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.biscuitcat.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.biscuitcat.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.biscuitcat.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.biscuitcat.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.biscuitcat.app/files/profileInstalled
- Size 24B
- SHA256 a508df81f1fceaeff6883d76ebefe2218a3408468c2bfeaf8478a321ddf81e28
- MD5 ebe1ae873af208defcf7e3c70c714d25
- SHA1 c72f703205b16b85ba34779efc3c81f266775447
- SHA512 1aab940822a53a38f71550475fb62b5edbd56e1ffe3d0615e67cbf6dca2cf62c6d092ddfe50175ac9781b5f6f0585701c15fe1de890e2c08b4cb924c6f9a02eb
- MD5 SHA1 SHA512
- Path /data/data/com.biscuitcat.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0517ac36c2df601a43e59e5a7590bc62d81a16518798ceaa4a727e172d0ee226
- MD5 916bc57d2ebde977a68f998707f5e82c
- SHA1 71b22a1f7fb70a64ac3a29d72339e5d16a202286
- SHA512 f317182bb07e55f3f94849fb4526510011d35239f72d6cac1694722be0b96d2c15b780a2e1f72bddac7f10737a3d26e20d667c0c3aa12a08b4c0f4cc4021f858
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.biscuitcat.app/primary.prof
- Size 2KB
- SHA256 73a6b758fad4f4cec4300745860a25d15456fac492f78e26b2db4ef901fa0906
- MD5 1377d54af895e4187ed9a1b7a784168d
- SHA1 59e73e1b9924fb2486e6ee7e43941dc70d7e0525
- SHA512 28434be67c6b94392182b81d9bc753a206c74130c4a92a60356f7565ced976b59ac36cd7b3abe00c5d3988a7e6efc900f1be998821f88233829672d6f362c9e0
- TLSH T1155119C12BD2EB978CBFAEC0688508D5B86C8D333D2C1B4E17851E5BDA0D2B45365E93
- MD5 SHA1 SHA512 TLSH