Analysis
- max time kernel
134s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 12:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SmartStudentPortal-v2.2.0.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SmartStudentPortal-v2.2.0.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
SmartStudentPortal-v2.2.0.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target SmartStudentPortal-v2.2.0.apk
- Size 185KB
- Sample261102-plq5hattgv
- SHA256 4ae8c3e24dd8070bfa1c70a58f0538565fb5b8d26528eb7fd8fba9335b14ad7e
- MD5 daef4543c14742f6f5ccf5d0f14cc9d7
- SHA1 55909a8f418589fa2e952a330c5d53c1ec60fe53
- SHA512 af4a6c8efb7d0fac86a2d821a07ca0d77fa030f75512c32e06f056f6667b9a5d1163dea5ee811e49be00ed66defc2cde7cfe3acd5ec23a7c64feb5c4237278c2
- SSDEEP 3072:6mBlTDQkiSgHLcrPEVOHrkV3Op5C7C+UmNC4BSEw5qtX47jJY8qNWhx0VPQEi:60t+HxckFE5C7++C4gEw51JqwBd
- TLSH T17004121397084379D676C97E91B78F439A30E5E12363A3678921F46C2C663C47ECB64E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener iq.edu.ouc.smartstudentportal - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone iq.edu.ouc.smartstudentportal - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver iq.edu.ouc.smartstudentportal - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo iq.edu.ouc.smartstudentportal - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo iq.edu.ouc.smartstudentportal