Analysis
- max time kernel
47s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260721-en - resource tags
arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system - submitted
13/11/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app-debug.apk
Resource
android-x86-arm-20260721-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-debug.apk
Resource
android-x64-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-debug.apk
Resource
android-x64-arm64-20260721-en
3 signatures
150 seconds
General
- Target app-debug.apk
- Size 12KB
- Sample261113-vb469sys3r
- SHA256 d842ada5c80693d22763d616fcd0c1fbc0622c1039927aec646dee55dc673ba4
- MD5 c01402bbe6fa65765d5491d43448a80c
- SHA1 2cb9ced881ddd38cef07c6b4f48bc5871b25d730
- SHA512 ea376c9de9389be7e22a6268778caa4eb98b04be2344fa6631c5fdd9ea27c1b6cca75015935c59d508545bad18d1e75fd022a1ade2b6c75710b3d54eeb035668
- SSDEEP 192:agZE5AcOhRbmBARw/WDixDkoy4xuAPXVGvnQHvMPcBm:agZECZhpydlIuVGQUPcBm
- TLSH T1ED42AE69E35D2008EE0E56F812DCBE32D9A1C6550AB0AFF3027AA644BE6DB4A07157C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.apkfactory.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.apkfactory.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.apkfactory.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.apkfactory.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.apkfactory.app