d80a21019460b63580ce99e329cd3380ad5d61a9c5f37ca3d4beda02b2796c13

Analysis

max time kernel
46s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/06/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hgapp.apk
Size 1.6MB
Sample260602-pea5psdz2p
SHA256 d80a21019460b63580ce99e329cd3380ad5d61a9c5f37ca3d4beda02b2796c13
MD5 f89dd7f5ae7945a9fd254e3a9ab10d76
SHA1 5cf5c1e7d2bb67c03a5f07e73aebbfd6d89eb43d
SHA512 08cd1ae8c8a72bab9fe360297b6065692cd1fe1f294b7ccff54df73c81e000515054e4b0de53df47f9ed70ffae4862ab1006e7ed8234522c2789c16ffe3e887b
SSDEEP 49152:n+hSSSgx+gpgEu0cX407R7EtqYrrz5Z0iGHw1:n+hSdU+gW8cohtqYj5Z0i51
TLSH
T157750143EB08F57BC5E7C6379776065646024D284A83E7931E45B62C0DBBEC48B9AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	n7yp.nqvh

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	n7yp.nqvh

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	n7yp.nqvh

n7yp.nqvh
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4707
- getprop ro.product.cpu.abi
  2⤵
  PID:4743

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

tbslog.txt (deleted)

Path /storage/emulated/0/Android/data/n7yp.nqvh/files/tbslog/tbslog.txt (deleted)
Size 15KB
SHA256 690345b5d6d2e87c5a8cb97f2362e1679c255b86788455d0a41cb3cc2a8828b0
MD5 8fcd05740eea05821763d233332d4fbf
SHA1 9a0a2ec2844b4c2c5097b7d711955583803cb57a
SHA512 e757b9b6b56cffc00403965434156d2d025f4e8cc21bf397d263eab3f364d0345aaf267a48082e35cfe2404887d6ab4f7518cb5ebfef08ad0b08ceb5e63056d8
SSDEEP 384:3UaS97za35+tOiV23e9LOQkg9BmT6iayJnz:+7+35GPw3oLOQ9BMaKz
TLSH
T1D4628E607343680684D187B25B9CC82C7E24EBBFEED96306186D9E0855FDD1DB9372B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads