Analysis
- max time kernel
72s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/11/2026, 11:50
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
APY.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
APY.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
APY.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target APY.apk
- Size 6.7MB
- Sample261107-nz36jsxt9q
- SHA256 4393044b8684ffab73627834d859d4cad7e34fea8c3be2f89293a3de52554680
- MD5 0dc6d4bff9e13fac4ef30d77913c8ccf
- SHA1 d9331a5215276c97dc0615b535066657354a911a
- SHA512 3bdcb7cae0cfa24be6e76b16b1e9ddf207048d512c5eaa1f3aa81231b16ca6f98f8462e53f87d3ab61a47e292b84b872c7a8a7db9bac4a0bc140c0c74d44189e
- SSDEEP 196608:AroB7Jo0xdrBQm+7wzFtqqY76pZI2XEf+dvkM:5jo0/rBm7M126HI2Y8vj
- TLSH T1AF66EFD1AEEC781ACB728037CB69B2FD4273DD5E8646921B7434F25C287798C0E706A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.apy.attendance - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.apy.attendance - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.apy.attendance - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.apy.attendance - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.apy.attendance
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.apy.attendance/files/profileInstalled
- Size 24B
- SHA256 0319d5a2bc0dbddca7462a84a7dfcf20cb0ada07d700584bd88a99872886e1c0
- MD5 2c9c9dbcba996a995daed66ab5682cd7
- SHA1 8fee06e493a786d6143bf92ba6b415e1530fcc16
- SHA512 f0de7d33a936f92ee0b2075599199f5b5ed22e655e41a843056ecbc5cf9b7a545c4a3035bc7a7961e427c074a581605d0f612b4cb662f70e7be995ba0f70a147
- MD5 SHA1 SHA512