eef734dac634e7f5b69f1ab4bda8b7526fab7149900f36518beaec97e067a61e

Analysis

max time kernel
86s
max time network
162s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
27/03/2025, 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eef734dac634e7f5b69f1ab4bda8b7526fab7149900f36518beaec97e067a61e.apk
Size

2.3MB
MD5

e9d7d5b922108818a39b97499f8ff279
SHA1

da8119e038c4c7625204fc926496f5986407512d
SHA256

eef734dac634e7f5b69f1ab4bda8b7526fab7149900f36518beaec97e067a61e
SHA512

f6ffdfa4d9214decfcec0059518479e63326526b095cfd828ccab48346232c9b465c8d50fc28ffc2fcbd30bbc18de0da6597834dd71014b01beb3421acada320
SSDEEP

49152:2WDRvFm7nFl4Uk2agh1Y+ijuzdK3fC6/YdW4g1Z31RN:5DRdUFIgh16izdKq6/vZ31RN

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.samples.apps.nowinandroid

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.google.samples.apps.nowinandroid

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.samples.apps.nowinandroid

com.google.samples.apps.nowinandroid
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4841

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.google.samples.apps.nowinandroid/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
6a96b28deb21be0d096867d5a1d392a6

SHA1
a6a2736bbc70f99860c52009a7e57d8b185d6357

SHA256
4c70a2df3adc299b18f65fe8dbf0a6d165df217ae39cae9f7eb8e31f8d3a3646

SHA512
966a04e8e38b02442eee1b6a38fd4faedbc5feff8bcb5be6faaa3e0ace9c429c56e8af0b9a2ecc314a6308dff8406bb2d8ef3b96d9a45ca8a4afec496aae96b3

Download Submit
/data/misc/profiles/cur/0/com.google.samples.apps.nowinandroid/primary.prof

Filesize
1KB

MD5
6b6c1663ef3516b9880b84f91fb32e1e

SHA1
42de77d1e883cf35b2b00c3e99e17d0750fd1e3c

SHA256
877bd3fc96d3c3096c5e070ccea8a7b99219a1f030fa1e88e9addcb87effe49d

SHA512
53584b28ac5f20c19bac83757ebddaef2c6c2880d623aa99fe9a412ded099815cf5864cc52fc88e7ad4b5df6788dabd1be7cfcccd0650878765e726620a62773

Download Submit
/data/misc/profiles/cur/0/com.google.samples.apps.nowinandroid/primary.prof

Filesize
2KB

MD5
55e594929c0a9f98feb97d35851a905d

SHA1
430cd734aee081921dba1bd29e77eaf1e6e0f95d

SHA256
7413ea11ae4e832bec7d9f8508bd4729cca443bfe013b1eded98267048e820dc

SHA512
23f829cce8f4aaf0b95c246a184c0cae9e7c3704dcb6c5f7d6f33521d3fb6d4064dcef3eea503d762b83b825cf47799a551dd35f94ee7775af07981fe6cf4e4b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads