bb1bd5dfa4bf3f619a5c62cb26e9c649849e097360b08933b93844cfbbf977ab

Analysis

max time kernel
143s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/05/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
UdinSlot.apk
Size 2.7MB
Sample260506-pgdzdaas2t
SHA256 bb1bd5dfa4bf3f619a5c62cb26e9c649849e097360b08933b93844cfbbf977ab
MD5 6f7823532ede214409fe63564c0696fe
SHA1 92975458dddfdd925d72f3661063e7c7be9afe49
SHA512 530048230af7a65e4689fa54577b3a39f87c1ec2b311290d72f26006913e7249960712dffc4b79350ead16a0a6b1405027abec94c31ef999884df27821e602d2
SSDEEP 49152:pfKousz2gCoGTXf3Qf0XSCBiT0eupyMwlDCqmaHJWmkMldMjCBg8YSDDZw1lmgPc:pfKou3g1GTq0iCBg0epMwYEWadby8zeQ
TLSH
T109D50182EF65C82EC87748374EAA433512569E1EC6A7974385EC762C28376D80FD9FD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.p4d_udinslot.app

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.p4d_udinslot.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.p4d_udinslot.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.p4d_udinslot.app

com.p4d_udinslot.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4903

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.p4d_udinslot.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 af4e06637c4eecfcc6273c3e54de8437da598e04efda2092ab50bcf257cf0e47
MD5 ac1b9a0e211831f1a7e01d16f94f62c3
SHA1 46f15887ef7c15931b1093879b93c2d3b68de64d
SHA512 7dc6a0802b094f580a4a41af3e0f1d30e79da83ec47469c8979bde0fff1b61945f99de0026d3c88967d5fcb321f2fd6c56db79b7cfb3c51f6942e4114e7f7b59
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.p4d_udinslot.app/primary.prof
Size 2KB
SHA256 684d76e0d041b9c632c80f9195a91e9b1e170fd4f4150217d1c3d7862632f296
MD5 2cd88bf4378e2163bd826a2b58f8d849
SHA1 61915bc9dcc4db606400feb81b0568b715587745
SHA512 09e337b2fd200288514ba03934dee55e436712148e3d496e2923065fce3c2dff6efdc3df3ae36a1ef9abcbdee350635920bde2c0b47efb6a6191561c4a4ed22b
TLSH
T1B14119293E51C377D03CC85025924AA572D7C038A563303CA0F66454EDB5DE28E90D36
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads