Analysis

  • max time kernel
    127s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    02/11/2026, 12:26

General

  • Target
    app-release.apk
  • Size 6.3MB
  • Sample261102-pl98dafb25
  • SHA256 674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.krljmlk
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5056

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.krljmlk/files/INSTALLATION
        • Size 36B
        • SHA256 ae10ca1e0180e0d5d1fae3c98e6e6ece4303d99c033bef07801ecb884ee9be07
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.krljmlk/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 82060eb0118948c9793fc668197a0e37349ebc21b6c2fe7e277af77a6c75eb70
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.krljmlk/files/profileInstalled
        • Size 24B
        • SHA256 0f63bbba8c73b274882d2c6ab5df2baeafb0c7e0c1a2778475a3d97cebd497eb
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.krljmlk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 67a1fa3ea6dc5944a7d032ad38bada99f3eb36e00b7515c26b6f060e82b9ab40
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
        • Size 1KB
        • SHA256 240211707e209820516c0a79729077c1400e913886c5b376f194c1e46a155900
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
        • Size 4KB
        • SHA256 77a1c06757d5ce26e59fdc30b48331f2c783cd6cde05e2cf64bea9537933d739
        • MD5 SHA1 SHA512 SSDEEP TLSH