Analysis
- max time kernel
51s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/11/2026, 18:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
mTrade-stocks.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
mTrade-stocks.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mTrade-stocks.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target mTrade-stocks.apk
- Size 6.9MB
- Sample261107-wve7xsdz21
- SHA256 7a837884119c34a0eb22754a7e4d4c0a320e0c0bcf6e46d1a529db4de4a8672f
- MD5 4b12375e049749876e25ff6637e10ad7
- SHA1 0d59bd7d4ba1d19f1188f59d6362946eae2bb011
- SHA512 e7195674920f82c240045a042955ceaefff65b76cf7441b629420e9e098218dba939dce5fc29c85e24d1ac2f42bb85458462d49b506db5de49639e29753a730a
- SSDEEP 98304:fWi0fFjO1Tt0rqK0gUPA+gdFvHubgB3EGBZWrY8578hSo7tm7917M5rYWyHaCQcN:n09L0gyBgdhVB33e57Ho749171dHaC/T
- TLSH T1F476F149F758AA2FC477603355BA5631118B8C168E83DB836A5C320C6DBB5D80F9EFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.m_trade - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.m_trade - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.m_trade - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.m_trade - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.m_trade
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.m_trade/files/profileInstalled
- Size 24B
- SHA256 128c887e2d65d3e548621dfa80651b76af10e6809c743d714caa19b6e19e8759
- MD5 89da49ea7f0acf70d0fa0fa38911c616
- SHA1 aab7c54c0f9706bd0d4f5e075c2eaf1766064bb2
- SHA512 3eb774e9f4a9410fd44e0401d9f98cfdbe6e7ee447ec5405183de43c7f27b290a89ab8062774c1dfdd09db52fa1291321bdc9baf3ed96f81bc82d81fb88d8a6b
- MD5 SHA1 SHA512