5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332

Analysis

max time kernel
132s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260104-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260104-enlocale:en-usos:android-11-x64system
submitted
20/01/2026, 08:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332.apk
Size 2.4MB
Sample260120-kx2cdsev8f
SHA256 5769ae3cc93943dda4d1743f2febf6cec1282a0a6289da68cb55bb4724ec9332
MD5 e81fab778417ca2c0d697c728d67f043
SHA1 c69326bf8f4b6c614290be817a2a1672fdd0d877
SHA512 f9d9ead3444d4746ae0507902f228775968b9f4ee3eefd057eadd49da6cff64e08eb104f70795a92c43950f02e772219be05bf96cd955dc75dc4420326d2de0e
SSDEEP 49152:4Lbx7rsoM0WXd6TadGjBEr7OR2slXy3OrptCA3JV1x8zQT6Cvnx0:4L1Xs5ITImEryfXy3OrptdVJZvnq
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	rznnih.rigxko.ujyoeo

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	rznnih.rigxko.ujyoeo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	rznnih.rigxko.ujyoeo

rznnih.rigxko.ujyoeo
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4796

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/rznnih.rigxko.ujyoeo/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 6cde4c3ac5e75a749ae314778a48ba8d7d5eba05413cc91472b257e88f016692
MD5 9665666984bdb8028dbe1d38ccfd635a
SHA1 5ef0a64eb207e803801052963bc45715963bf422
SHA512 503c3c9c927d75fa88613218d51bb58de55a72e1cd72b2c0f2d801a2468e6ecf413f97842f098f60a624d0ed622b3ca1bc480e95b4a2514f07f0947d45068160
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/rznnih.rigxko.ujyoeo/primary.prof
Size 1KB
SHA256 16979f3c24ca16774aa737aa8a0c15fdc8e33120ab0321d1028051fdc69498e0
MD5 8454f014d63c38ae7a6cb295d2cd6880
SHA1 4364b64d0260bb0e1539cf7adf848f3c32db66c1
SHA512 77160050d5b681c4e3523b1440022e55513e1b3d8876daab9873507fdc52abdb6eb1d8f6fc02d5a49a517f6fbe03dd0cecff76dd681814fcb66c6ee0e0b0bb7c
TLSH
T1D821CA0C03D0A67A90321783C7AFF426D297EFDC2097E0B2141E7C36134E1A9B8D6551
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/rznnih.rigxko.ujyoeo/primary.prof
Size 25B
SHA256 25a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91
MD5 b9d9e0f8902d129e1aeebff0ae7b725b
SHA1 cb0d2b4c9dd60a5c1fc6261fb581bcd3416fe781
SHA512 f158a9dc753e0cb41f71a98714ff02198c576bacdd792a6153fdaf6f9a7b52d8cfb6d09099a269d0c1b0d31e2ea5a307ea1db85115bdc6797887a6de36d597f6
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads