Analysis
- max time kernel
104s - max time network
160s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
13/11/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app-debug.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-debug.apk
Resource
android-x64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-debug.apk
Resource
android-x64-arm64-20260721-en
3 signatures
150 seconds
General
- Target app-debug.apk
- Size 17KB
- Sample261113-vb3y7sys3n
- SHA256 20f495a10e79628d268f5249fe079da5ac8716a1f4e266a552549b5718ec81e3
- MD5 67fa392628ad8e1512251e9937adba5c
- SHA1 5132e002755bfb15e9f103abab06d72a57a2301a
- SHA512 2d0937fbf5df0ba8ba09a57e26c074763c5f11cc8ae43bdd3c67894421c29e6db54137357a70867277165a86f9d94d4f2b043ff8d46e56b98cc1934923979e49
- SSDEEP 384:jVv2JqGzJKmMEyCBToNPgdRjgqggYevcZ1fn:pv6tlMpN1E6qTG1n
- TLSH T1CD82CF637BDC7A02CD99A5B45C4C23B76AF682190E25AF2B3140EB453D913F4CCE66D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.myapp - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.example.myapp - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.example.myapp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.myapp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.myapp