Analysis
- max time kernel
46s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
13/11/2026, 12:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AkibaYangu_1_1.0.apk
Resource
android-x86-arm-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
AkibaYangu_1_1.0.apk
Resource
android-x64-20260721-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
AkibaYangu_1_1.0.apk
Resource
android-x64-arm64-20260721-en
4 signatures
150 seconds
General
- Target AkibaYangu_1_1.0.apk
- Size 4.0MB
- Sample261113-pg8trabx7m
- SHA256 8729e69306fb79afbf31b421a2e292d36e2c9a47964019f2cf5330e36ea873ea
- MD5 0d8a9f17a5125032902da11867c69835
- SHA1 399155fb6ab9f4be800c2ed967dcd978ccfbfde7
- SHA512 f851d10e091198a1d208401b60d4054faf4e0e3a3f87cc2f3022f68739144bff4c5af75e952dca5059ccd239ec6a58deb07474b25642d174f5888aa47de66457
- SSDEEP 98304:VqbSNVs8vKzUM6Le9tbbXkG7EZZBO1Tt0rwmhb:QbYs/bbPqZlB
- TLSH T18116D099FB585E2FC8771432096A5231524B4D168F879B83A94C371C38BB6E80F5EBCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.akibayangu.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.akibayangu.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.akibayangu.app - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.akibayangu.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.akibayangu.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.akibayangu.app
Processes
-
com.akibayangu.app1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5124
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.akibayangu.app/files/profileInstalled
- Size 24B
- SHA256 912ab794038aeba8fd1dbc41c0d233f0c22371a04e26393d21163ec2e481a4f1
- MD5 78dd698c780698110f6a1d5a0f098954
- SHA1 0d1dffbaaab710e17c59fdf0936ce7098f20e42a
- SHA512 a34ff8be9d539cca28f9e334fe974e5d56720a63c0f4ec7be93a3c274f2f87304a7fde62ee84b7b0c2dd6633bbabcff731498585c939412d0706c3e06c9b4b16
- MD5 SHA1 SHA512
- Path /data/data/com.akibayangu.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 77c238f37d683645743a961484f4d415d42a5fe39923adef65fa55954a1db83c
- MD5 b249f3310baff923644b5f5d2c56892e
- SHA1 1297e1632353701cb87b65b60b5546fa463e62ea
- SHA512 59348124935ec86fdd4557b2f1e9174ed2e086edc90b2495963db864a3f5ad619cbe0fa58ab9380456cc2a1e9426f07b93a0c2f74fe5d32baeba6fd6e3081dbb
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.akibayangu.app/primary.prof
- Size 2KB
- SHA256 32e8eeb016f60041a318ed891465cf68108c6952f0664977180f00689af56734
- MD5 c5eb99781f6759db30aa32df17a3353c
- SHA1 14a267f02e6412875977764eea0f9a92a2b79204
- SHA512 0055753a41f2541384f564bdfe31dde22a208dc213a7439e2e9f116b46000cf5dd9e3880607c1e0474556c8380c5ea80ab78321e7c0082a78cdf29b5e0f9bbb4
- TLSH T17C514C0C9C04802B445F0253066020AB1B05799779E97F92A2E002F5552FCD8FFD9892
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.akibayangu.app/primary.prof
- Size 5KB
- SHA256 75f78120864afc0347b4c3931490b92750f99d5fd11efae4cd643f199b64d3e9
- MD5 f72ab48cd92f627be27c55c035d883aa
- SHA1 51cc804635803151c8fd093d8ed7e72a7ea3e70e
- SHA512 1eb7d9739d95c93d9fa44ab069f5c3f7876781e36cb3eb28fe350ce8baa3c6bbd95801e87d92c8e82e15e070b5ddde0a1d315e27d330d13870b0269d44d72c79
- SSDEEP 96:o7VN9Yy7HtwEDDDy9dK7lKqFImNFK/XEIMI4LMZ77vb6mI3HrZ+LHFE:UVNuyGEDDe9dK7l7K/U/oVA3HrZCHS
- TLSH T14AB17C613113CDED527B6D3820E24A92B62DF49C4F7DB2E563E06B9276A86350628602
- MD5 SHA1 SHA512 SSDEEP TLSH