Analysis
- max time kernel
127s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 12:26
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target app-release.apk
- Size 6.3MB
- Sample261102-pl98dafb25
- SHA256 674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184
- MD5 c6665eef112f1c7c7431c6d2147ecb97
- SHA1 8e17d643b02bdc61fe01ce71d99afff9b192edb0
- SHA512 0cace28dc2383f204bca8189a58fd2bcd682047feb208b79de4167694965e862635f8267a53439be7547516223943e582630db8a8ae9084b612aa839cb262126
- SSDEEP 98304:pZVc7chQ2Di2tHAQ+ulQqEpAFOWWAjiwu5kCb9yuRo8zIrSPUwhdKHJAOAZLy41k:pM7Z4HAQcGaAjpUkCbbRZz0GOAZLyK8
- TLSH T18B66F19EF7195A2FC47710728CAA5233125B4C16AA4357736978331C38BB6E88F49BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener co.median.android.krljmlk - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.krljmlk - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.krljmlk - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.krljmlk - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.krljmlk
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.krljmlk/files/INSTALLATION
- Size 36B
- SHA256 ae10ca1e0180e0d5d1fae3c98e6e6ece4303d99c033bef07801ecb884ee9be07
- MD5 cb04751405c3d9499af365f005c1b03c
- SHA1 6d71590ef6d1b4ea8d6d81ca5e77cc40b2b1d346
- SHA512 d010015901c0108595940896fbb78efbfb710fbf2a74ab2188b355aeacf4f9ebef95709f3164ea338551c9a6231b7ec13b74b3101e6de2bb0b02608728ee4c9e
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.krljmlk/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 82060eb0118948c9793fc668197a0e37349ebc21b6c2fe7e277af77a6c75eb70
- MD5 e3bcf29dabcc20796c9b4132239c9bf5
- SHA1 6264e968b80f7f791b0033358b69e99b73f226f9
- SHA512 3bb84e83f7b93eebde425f697e81361a45bfadf6e110caf2a16de34e533b3b8447a1fd9b12eab81c2448edc7a4cd6f7ffaef5aa4173110d20ec4644d2d2c26d9
- TLSH T10B410474C9380DB398C82864B25E421B3A72215B2FD5391CFB8C162C1F4C5BE69B420C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.krljmlk/files/profileInstalled
- Size 24B
- SHA256 0f63bbba8c73b274882d2c6ab5df2baeafb0c7e0c1a2778475a3d97cebd497eb
- MD5 1cd0cba3f4f70c833b48bf3cb7a31ebd
- SHA1 98324f15e831c948639e9ef4c881c266163b35f9
- SHA512 e5250d64c0be6991e09da598d32d509125162befe8a1cc28dc4430e6e22db642017090b1165a21bfe7072d6bd158b26eba733164f52fa040b0e4a7a418cdd39d
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.krljmlk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 67a1fa3ea6dc5944a7d032ad38bada99f3eb36e00b7515c26b6f060e82b9ab40
- MD5 8bf50b75e2a9a87ed8e717f1f7d6e075
- SHA1 a160dd6c79d0cfe62b7e8c5aac8f2c5313c846a5
- SHA512 b76376fd25192cc372edf8959aa9cd3d42032a35cb4032cc3aca1f40f41956a6e30152df9e6a0f3ed133a6fbe37ad2219e9d41689d4eabd854a0a9b9691a0664
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
- Size 1KB
- SHA256 240211707e209820516c0a79729077c1400e913886c5b376f194c1e46a155900
- MD5 aa6e13f2f3f4e623fbeff27e3f81b4de
- SHA1 41379046b787014580def202930dce4d4c6582d8
- SHA512 87fd9627056f575f618bfacc03dfd87b3438a86db6a1fc356019ed28806f2a5183994c1cd2914a185506f59b7fb18eb685907bfda0af713ac4780a7171ad9281
- TLSH T1E041F98802D5E10C52531B6A01A44933F3F2F663779200BA8C39F88C13534BCA4523D7
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
- Size 4KB
- SHA256 77a1c06757d5ce26e59fdc30b48331f2c783cd6cde05e2cf64bea9537933d739
- MD5 52e2e95ee4b529a685d23f95d85f544b
- SHA1 966de2dcc8f62fdb715382035d2e3f4f55fde1a3
- SHA512 548f6a13c60f46f53bfb72442e4e6f2753f2851c17b7daa182de8c8a9931a330f43191e223d580a955f2e2de62a0ef6fa85f583ca8f3f0803514225d019ab806
- SSDEEP 96:lSoY6t5LRWqGTPuLsFOGd7JJETBjF1efA+5O4j9pjl3TU5Q:l/YSDRGTGL2OGXJEZF1efA+5Oujh3T4Q
- TLSH T145915C489B42A00B0E73295D10CDF8B059BBC2D94F726DE03C5A47E67502AB766B10CC
- MD5 SHA1 SHA512 SSDEEP TLSH