Analysis
- max time kernel
47s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 17:49
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Aurevion-Busca-Mobile-0.1.11.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Aurevion-Busca-Mobile-0.1.11.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Aurevion-Busca-Mobile-0.1.11.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Aurevion-Busca-Mobile-0.1.11.apk
- Size 5.0MB
- Sample261102-weelfsvzdz
- SHA256 efc9f694a75be184e82e41b9b787a5bd5e8e62c3f67919e5a78b648089587871
- MD5 8e51064cee29193184c9a02de45bf20f
- SHA1 9d13efbaa48fcac5b1c82e0ff9d24ebb04b22c73
- SHA512 b573cf5db4f245638afa863beeeb00746813306b9f56f6d015aa4ee424fbcfa1dcabea92c1548fb512090a00ab21064f3912412f42d3e636a5eca31fb306c788
- SSDEEP 98304:IH6SneqAVkGocq3qOPvpD3eYqGo0zAGRUb5XiF2XTNW2jbykkiX7S:uGqekGfv68t6hRapNW2jYJ
- TLSH T1F5362242F3E56C2ECD7780360FAA8B7926965D26C293D31B8675B22C6C7B6D44F05BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.aurevion.busca - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.aurevion.busca - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.aurevion.busca - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.aurevion.busca - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.aurevion.busca
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.aurevion.busca/files/profileInstalled
- Size 24B
- SHA256 56fee107d1f0a3b83ef0224aa5fd904d51e8f0b981c2d4063e6e5882558937c8
- MD5 e7e615cf5aed641f7baa86dc23996e6d
- SHA1 159cee6e2be97e8900f238116dadd7bdfa431ec7
- SHA512 e854c53359196c81324a34d56d2763d508771dd72eca296af7191b999edcb323519ad78424760b5ee7c2034c805ee4f2ed3c45d155dac01774c2e231f081dd9f
- MD5 SHA1 SHA512