Analysis
- max time kernel
17s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/11/2026, 05:35
Behavioral task
behavioral1
Sample
3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target 3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
- Size 2.8MB
- Sample261107-gae9vsvw2k
- SHA256 3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6
- MD5 fcfd090aa00fe9388da6d20cd2326058
- SHA1 6784a299c681a9f539a12a2790959d4e2c32e84a
- SHA512 96a88981d05468a17dd48bb46140f7608a709191b09f9ad90c56c699ffc95c8c56aacf18a3d9e8faeb5799f9171b53d45394c361c3cfc4da6cc1e2a27d635e9d
- SSDEEP 49152:yIz1xl502zTNGCxSJO5WO82wGqknU5vHyMMuCRBkGyYFyY56CCTNgpR2y3K64sKC:tBCyNGCxSJ8XvBwAMuBkUN5ZCG2y3K6/
- TLSH T197D5BE46FB45892AC4F7523308B9563112074DA68F83D6C77994F23C28B7AD44FAABDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.modol.nap - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.modol.nap - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.modol.nap - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.modol.nap - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.modol.nap
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.modol.nap/files/profileInstalled
- Size 24B
- SHA256 ee054c8ebd58c24ad61e228689f853335a417379055dfb41e982ed4cdd68e4dd
- MD5 110430cbddd9d1f384780726bf832131
- SHA1 af056e9300be9f7cd339cec43d901de43899ee45
- SHA512 cde540350c1c906459d301786914bf2b9195ef1651853c92c65d877729015e7f2fc46b1b45f924916bd5315f5473386b1d58fe7e60c14c5d50c0ac19408115b1
- MD5 SHA1 SHA512
- Path /data/data/com.modol.nap/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 89141b15e7669c6f8e8e3177a2a5d873a143f074208de4f6e4944118dbe31eb9
- MD5 ba09cedd222b97dec4ac33b1ebd72c70
- SHA1 5f3560a59a1c1a2aec12a619c60f354f6805677e
- SHA512 162a3050fd2cb2e18e9609ddb7d36e66398d2c4d73777d7f0aa4268d0e3d3963c508b17fb62de95bc48bba458fef3507c8f7835ee3f42862f0d2e8943b963526
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.modol.nap/primary.prof
- Size 1KB
- SHA256 7104cfb2b066e69d3a8a20ece45192deaf89564dd619e5b9a189b3b588ce6ed7
- MD5 758515cfc630c81160b79a0c7f0af044
- SHA1 f8cc4c72264cb95ce635d3d7edb82399d15a6d6f
- SHA512 fc137cc960cd3ab1c6b9d242c019763576ad563397c59a740ed6aba6dcd9385ff2702f00856c43d9cb1c3ce0051d07a389502ba3a6b577e755ccd3efaefc70f0
- TLSH T1C421CA8B3C87D2D1B54A80BB7A1B4376768CA562116F310D6A995753C7C32D4F06438F
- MD5 SHA1 SHA512 TLSH