Analysis
- max time kernel
53s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 13:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nyvex-release.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
nyvex-release.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
nyvex-release.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target nyvex-release.apk
- Size 4.0MB
- Sample261102-q5bplafc64
- SHA256 9cb9af583eaf066ab1a8d3d0d027de0516cac3b1c93ff434766cec34752b26ce
- MD5 7b96f2d24a576431180d2c7623cd7d13
- SHA1 d41f2f5f9f7867b8af749e83d7cf6e9fb78b34ab
- SHA512 3f58f5d5b8ac18f878ae4dceed68ca668773816bf5801d8c70f24db0236687682ebdad857a774f1208bbff3dbf2ef16d765293fdfec5002cdb179b9210384085
- SSDEEP 98304:/Z4S//0KaPo8LGUuGus1LZiJXGIMov9NzHQtgVmZT4KeR/OJPbLh:x4u03PovUITBLzHQwFKeRg
- TLSH T15C161282EBA65D2FCD3648320F5B527157268E13C683D70B8998313CAD337D89E69BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener app.nyvex.chat - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone app.nyvex.chat - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.nyvex.chat - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo app.nyvex.chat - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo app.nyvex.chat
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.nyvex.chat/files/profileInstalled
- Size 24B
- SHA256 860a06c4f9102f8491328ebfd71a7ece34de4ce1371d5d3762d859a60d2377d2
- MD5 a36e1e62003d4d19be0a748a92cdf84a
- SHA1 cb7ff64f75550b84e181893b2ef69aa568620b5c
- SHA512 03e27aa70dc42647c6665fbb7b333f15daa8295afcb20b14d14682f83c824074c66be4c51f233e710ecabfb6528498c16631eda05a37f8a10ebd1e87066c56d7
- MD5 SHA1 SHA512
- Path /data/data/app.nyvex.chat/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 1c295fd6e3d632c82d550508f1bd6018995dac7c3c0621de24f9ff63741e4a6b
- MD5 6665c2d25e392d12ac364a658b9145b0
- SHA1 65c195873babc123df18aaf04957fac9fd840700
- SHA512 cf66f3934ae6961258ea7cb3b98e5dcd115ffc6d9eb99afe83a88890c2a8d3326fc9bab9e953ea3abf38292dfcfb90505dfa8893f3e67f58b04c57bfc8b3fa9f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/app.nyvex.chat/primary.prof
- Size 2KB
- SHA256 38615cc10fe0f14bb8749d78faaf09ce8dc2ac2df68b1d1f12cfd882c77c3b61
- MD5 b8998f0163537f4e3d07c798471181d8
- SHA1 a9dd701f462a334b649a53cf20678694dfe9d438
- SHA512 134404f7470e5f44dd707cfee4d68383fb7a269460ab0a6c456da517e92c1ee72c627b97e1697f3ffa2d7640bf6c9a19b38997a537877a26cd73b194ca7042fa
- TLSH T1C9413B7438B19762262D26AAD5DE3FC377884E5C10332970A3D524A6A470DDD2097F35
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/app.nyvex.chat/primary.prof
- Size 4KB
- SHA256 774464d59495abaf721f5c9f4cafc8b19b8995de6f402d98943b8e294a912abb
- MD5 b436901166ef08646e8c1acf311102d5
- SHA1 39cbf3b22865b61a607c1168c83e1f4dc3758b76
- SHA512 72c1f1a779e6d78da4f16cdebd2e38cb992783b653b1e03a9b7bb7106f1e2dcc57aa169226cfff5c8cf2d3643bc17625408aac1a7c650b476d23b0b43a14c76c
- SSDEEP 96:EmA67hwy7HJscCv3QsUd7tZXm+h4+NtwKttifTM7j3wdnyJeLXQD9igpy8wKuhN:lAG17HJMIVpTw66fyJ8AhEZ
- TLSH T164A19D0972303C99227A09B10A586FC6D272590F6C8D9DD9CC0A2E9DD8F2D96EB71907
- MD5 SHA1 SHA512 SSDEEP TLSH