Analysis
- max time kernel
898s - max time network
882s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
13/11/2026, 01:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
scapewatch.apk
Resource
android-x86-arm-20260721-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
scapewatch.apk
Resource
android-x64-20260721-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
scapewatch.apk
Resource
android-x64-arm64-20260721-en
4 signatures
900 seconds
General
- Target scapewatch.apk
- Size 3.0MB
- Sample261113-bs51caet8x
- SHA256 fdc7a209d3274067b93134c10e1a64ab2e7818fb528e186ab90c0ed5f36fce89
- MD5 24d1deb4aa35f5a54105357976426767
- SHA1 f4222bd8c48bbfc701fe412c02d7c08b76d4149a
- SHA512 6aad073f17d3ed152390baac1b2cbab21b412a0806eba6eaff447956f3688809848493abf321d7cec51778bfe2a84180788084e1e689e1294c9cfe61797a4c95
- SSDEEP 49152:/2pcV3zKEb17Aemw74umOW5EY24cecyW7zbAk+rb+2y9NfncVWxfrugPVmHl:+pcZBbpAefSOW5EUc+ozbDljfrRmHl
- TLSH T1A5E50182F7E12D2ECC7B88360F9B473146269D078957D70B9AA8322C6D376D84F94BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.scapewatch.game - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.scapewatch.game - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.scapewatch.game - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.scapewatch.game - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.scapewatch.game
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.scapewatch.game/files/profileInstalled
- Size 24B
- SHA256 6ec17b2e92921c5ce85f6caabc6d6a731ed3353c5f0849fc07e082b8130f7caf
- MD5 ed1d5ff31a79121e510430925a75e9de
- SHA1 e4743553588e950f87696a4e1b6ad08387a0a665
- SHA512 53cb5446a9553530dd67c94e2b1ae40fe8a16b2e33544e3ceb4c418ecd4cd95e3875bf042a6c8eb0a98d307e3ce371b24105273a7bb0d5dab4d7802a59907825
- MD5 SHA1 SHA512
- Path /data/data/com.scapewatch.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 7a79b141d48bb94be61cc667b3a2c37121b5c322c4f68a825b005f2dd241c569
- MD5 ac559193f6ba70b6cd3007833d15c8eb
- SHA1 a2eef1a0120e8ae681327733c52f9bc1d6eac6a0
- SHA512 035c67475cda36fdd27356f360cc184c8d3e4a66d9a35cbd28537556fd2b8cfe9849ed042f43c20315213ec74d722a4076d36a3c2767f4fef49ad0a9e1a9c41f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.scapewatch.game/primary.prof
- Size 2KB
- SHA256 53f7fe9dd4bfd827b7a60fe2d200ed29ebf7f355d301a88cd517e868d7d462f2
- MD5 06f88ffbc654d4e6937a16ff013927ad
- SHA1 c351898b43531673c60323b926d95e9c34a16c38
- SHA512 7333939646adff990cc81c57d331ee6a375f1c13893fde5cbbba3be50e6857ad7f3f0446baafecb6758af35fc1a564cc2026a86a0ac57432ed8a61cdce503a3e
- TLSH T1C15119BCC232BC3204BAAA364C6D0B5F93EE4E22E5F82452402D7BEF816C41BC358557
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.scapewatch.game/primary.prof
- Size 5KB
- SHA256 c6bfd57ea5ec3fb4795aa6247c63a87c609756bcc2874cb00280c525f2487a8e
- MD5 af743ee309f5bf45751a97eb1810a38d
- SHA1 39959ff0c1ab90d699cdf85746470e91d387f243
- SHA512 fcd07611555f9c2509ddccc1a80b64e3bdca59691f53dc6cb41ca0e3f983ed6c930eec78802b3170d4f6bf168649f00b6e8fab54291e89bf5884ea0e7c54bafd
- SSDEEP 96:MBtOD80BBPGdJbUKsqaAM7bg2+fFexuISzjnmGy08CX6IvE69MwaOlyV:RHTGdZUKsqZMw2jtinyA7M6+w9lq
- TLSH T1DDB1AF6600B1678BDC3AFB1B60332955379F7C7A87170ACEFA4C2F50E04C64AA2D6248
- MD5 SHA1 SHA512 SSDEEP TLSH