Analysis
- max time kernel
47s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/11/2026, 19:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DrIbrahimClinic.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
DrIbrahimClinic.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
DrIbrahimClinic.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target DrIbrahimClinic.apk
- Size 4.4MB
- Sample261107-yh7gra1vdx
- SHA256 41fde4fcb749437a458658ccd65512250ec8cd01ef687aedf2383b1971395c90
- MD5 945519a207532d1d2851b86a61971e6b
- SHA1 71b2a7922b90d5a883cd98f4f50843e602c255d8
- SHA512 aa95e8bf4cc3bfba3c3ac3d4ee099a4a42955b651a2c436e7f9fd52c1b2d3b55485c271fb63f54d108d50d6d85cec4dfadbc21652d1861ebca72973cdafe8040
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfC52NehmMY:eZjJk75T15b6tUk6z8RdCgNehU
- TLSH T1C826CEC6AECC382ACB728037CB6AF1FE46B3DC5D8651A5163478F168187718C4E75AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.dribrahimclinic.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.dribrahimclinic.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.dribrahimclinic.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.dribrahimclinic.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.dribrahimclinic.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.dribrahimclinic.app/files/profileInstalled
- Size 24B
- SHA256 ab05fa2501d80e26783e5422671a723411750fbac3714b29cae8ca414c10ca9f
- MD5 ab9459b007661b7fd1a2d4f2016c88d2
- SHA1 dd2cd781d1c858793b705126737885bf9ee63e2b
- SHA512 6ffab35fb1a7b3729335ef238bc94cb9089ae9552c0fd6433e73af779c64167a6488290664d04f38c568703ef06f847abab05016db4ea6af4f4a5d6e2b825886
- MD5 SHA1 SHA512