65c96b2ec4f3045b1a68ea6a3d6e731db0bfab8d44e87701676ffe143c6e5ec4

Analysis

max time kernel
16s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/05/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Emperor268_0.0.1.apk
Size 5.4MB
Sample260508-pgqceab18l
SHA256 65c96b2ec4f3045b1a68ea6a3d6e731db0bfab8d44e87701676ffe143c6e5ec4
MD5 153fdaa5f5bf7d6d98fb05b906545bc9
SHA1 9a32c603dccbf415cc73c057fd6b7444c1c8b7f4
SHA512 5448249c12178005b215b487b57bd07899781daf82edb8814ce69f9382a082bd59e0512ac48e262e7f3d62cdfde8b8a5ffa70fb0396af1fadd93838d198aca8a
SSDEEP 98304:vLavvBHW9/dxU7ezQhggS+KlIWstZeIpppW3WY/Amv8c9N42djbQoTYrFg:vLwvBHCQvQjRs3erFN4G3V
TLSH
T1C946F1C7FBD8592FC87700B2C9AE52B156478D028A839F43AD48361C697B6D41F9DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.asiasigma.agentEmperor268

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.asiasigma.agentEmperor268

com.asiasigma.agentEmperor268
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks memory information
PID:4878

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.asiasigma.agentEmperor268/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 54dbf5470a7145f5f29b3f422286571683d2dff0112043a949f5b3e2211db470
MD5 568a2b1139a0d1455889679fcbdaee66
SHA1 b2da47091075c20013655ab12a96dfd9d38d1bc9
SHA512 f5f24ee632ad9ab415c8bfef51aa53232683ef9f1e8ef8c366000c71cae0c89e0418b9423eb8777051c53074569f66ead2ff4dc502fd16779b8d3f2b427a9a08
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.asiasigma.agentEmperor268/primary.prof
Size 2KB
SHA256 272eda9ece0958b8b0fb9dddca2be0497440b9266c27208e3f95ab5930f294a4
MD5 009b83ed0fd0a4e9b52ec2ffdf186e89
SHA1 23f976c7cd6f4767172afaa29e88cee58dae5626
SHA512 1939bcb0c46f7edb968fc539d9f2975897d73e84eb4250b165d46b80eae9841a971309eaf75df3bcc291734408da748a9cd58ad86bf7af4338d5ea6980035a5a
TLSH
T10C515C6346B94C49872C45304283FEF4CF4F3FDEABF152AB1886A822B440B38C51BB10
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads