aa909aaf2ddbaea5f5abab06398606e8a92d98de9b0abbc1c8fb4d9de1336130

Analysis

max time kernel
45s
max time network
73s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/06/2026, 16:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Teardown-2.0.apk
Size 6.7MB
Sample260620-vhdynaf13p
SHA256 aa909aaf2ddbaea5f5abab06398606e8a92d98de9b0abbc1c8fb4d9de1336130
MD5 852db039e2cf2e8f74d2124d2ad61d9b
SHA1 e5cffeb9414a47ee8eef8723f6d34348d2c6c1ed
SHA512 2fbf4607bf3b5ee9b4c13cff7d5afea0080525e2ad4057ff863bf2fa5bc02a01668f57be549896c218ea9540f428ca57c09fbe82d780db5f046ae85baddba385
SSDEEP 196608:qR9xhlXICchaSYWN3sepxGmTGKiITUaqmxJa7J:YrchaRWN3sCxXGKiItN/qJ
TLSH
T1B66612C2F359A43FC477C03349A6063652628C4A8687EB577969B35C5CBBAD80F84FC6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.comp.teardomon.gm

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.comp.teardomon.gm

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.comp.teardomon.gm

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.comp.teardomon.gm

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.comp.teardomon.gm

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.comp.teardomon.gm

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.comp.teardomon.gm

com.comp.teardomon.gm
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5026

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.comp.teardomon.gm/databases/com.google.android.datatransport.events
Size 32KB
SHA256 a6417906596802ee2a80cd22ef848d832848a6f36f4e45d320e9b98633a5c456
MD5 ad7bbdcce258ba21d0a07659a3849e3f
SHA1 887e17f38cf736cc82125092f6cadd5753184286
SHA512 4519d5aec86a163c9c2c97d1cf9862cc9b421749c0d78c0f4ceee31c9fe07ac557e736d5b3f72942e2d5d44b578fc8a6789f2e7a3ec98ec2199fdc50dd3ac45d
SSDEEP 48:Tk859MEoBdUdndVd/7d5IvdldHlq8/JqFS:AEMEo0LIyNM
TLSH
T128E2DC2C8A202311C2BA143BE7E253824F3CD21F5723C3716E900CFB9DC25A6A8216D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.comp.teardomon.gm/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 c877a9ec7f867d5965a444fc96598e81bdabf1ca866ee237cbd0c202be251828
MD5 06fb8fcd8aa82c0e201a819a8d89128a
SHA1 69a912c5415f877d68653e9f2f646fede265fdf3
SHA512 3443c5a0fe94964e5e691bbcd55866fc35b67ca70419feb7fa1368a4749ae5d7e78f8ceb565fa8fd353aeeef0e1bbce7be1f7968d4b16ed1590a4f665424d165
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.comp.teardomon.gm/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 88331542558793f60011805863418cd5534fe0dc004cf3a68c647c123122c355
MD5 f9f93306a5e8bb584d8c25db1578d9fe
SHA1 5b65bb2a21632598d6da9c587a5185146e6b3777
SHA512 dc4662956b9fffc971d8939a76aa56caadb1f4846ed48b6bc60b1b8aa54dbc11c19c7b6c58e33bb6d5db0e3cc6827c1f6617afe91c50e91cb2e424c8ebf243a5
SSDEEP 6:7+/l9XJHn1T2vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKAI:7+tl2vqLiuWdwRmBEyPbc
TLSH
T1C20222AAAB800B23C81A16BF98D4C3400E06EB198271CB07166008E87C034CCA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.comp.teardomon.gm/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 7e0c1031148e07573e1ffd947af07f4f39f0818fd2ade1b89e464ddd3d980fa8
MD5 7b5b7448dd60c016cb0d4ff49d5a6732
SHA1 d48aa5ba0ba52916523c63e378fa2a1a27c43d27
SHA512 740ba790f18096b356fc69a71727d8ac2f5a643863fcb1c5d31f1da412ea2a0e5a76c029d698fb71961173b3283efcd04578a0cdb7164e695f41598173e2e153
SSDEEP 6:7+/l9nPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+P//M:7+thqLJdTRmBEyPbP/M
TLSH
T19302228E634208A3C12A17BBB0C883402E20E7149263CB071E7008983C826CCE890D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 4ea5da5c710660af6856ef2cbc77e948c8a962fa7cdf62f1faf2f078abdcd1c6
MD5 c99ffb71d8b394ca752ad7315b3a2877
SHA1 b346d2613d00a8a1362096e7ba64a890abef6f27
SHA512 246dadfbe412ec9af3152ba77f203f6bde4f076f959397de50527bcc61f77c7ce9fc7459e2527d764cbcad91fe0e2beae2c2f76e1348771cb0248af139b0fe0f
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6gaf:TLiEy9zmzrfRmBEyPbP/P+/0Fl6gLgX7
TLSH
T1CA7268CD7B105703D1734776B0CF93E21C30A2188337DA173B540468AC431855042F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 1e0a0efec9b912de2f03e99db4418bd6b51ab45d186658000275ed01d6c7c21c
MD5 5b4349be8559b514c4efb632df0306c8
SHA1 29ee7c0a789fad4e4736d78bcdd787b16b943e16
SHA512 d0016d66dfa553b6d7dcd14b2f6ef8dfb523b1dc94b6578f3a85749484472cb91756a00da86e2a6e48dbb5ea2312e5fa6673f995123fd76e80265088bfbde06a
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFl4BgN+/0Fl6gLgX7:TLQpmzr0GSP/h1499FgYlFL0
TLSH
T1347224897A10D707E2730B75B0CFD3E2283472254723D51639411A6C6D833864012F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 1309460c26d0868fb7d80c5d9bcb35388bdd0e6667e9065b7ba5673873d07800
MD5 76a875ec0d15578cbc5095aa1f7476c3
SHA1 2da7ce1a4e1be2363b709c33d15365581e12f5c5
SHA512 5f0795b27dce887982ed9012fbe0a0027b0402c4b9576c0ef18bf37f666f3b2671f7bb8c45886df73198c11d8b240cda63e8815ac19e3934407559bd4e1e456e
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/ZRhOLavnOAU7wU7UyWla4f49blqYFl4BgN+/0Fl6gL0:TLEvpmzr0GSP/nhKamNZ25499FgYlFL0
TLSH
T11E7226C9B664D607F2734B7961CFD7E2293871661727E2233D062B1C6D433968161F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 efa3c28a431757e56d23daedc1f42b4ac7b5b745ef65ab696c25bbe38e62eed1
MD5 f5bbbf6e33cef220b46b490c9917ee0a
SHA1 9497778e77cc555668219a491fb14479293c2844
SHA512 a0af0623208b6094d744e235915955c372128d9a278c466570b8b9af6ae6a3f9aa1984cebfd912112ffb04cde4fc3097a66e12d4ddf18ef8190cb2f37293bdca
SSDEEP 24:TL6Xpmzr0GSP/M9hKamNZ25499FgYlFLs:T2XArSP/M9camNom5VI
TLSH
T15C7226C9B664DA03F2734B79A1CFD7D22D3971660727E6233D062B1C6D433868061F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 cf1383c4969ad989dfefb86af268410cbc3baeabe11abd166c57ee3c954f4f03
MD5 1889f4473dd2c841e1cb9d6103dfbddb
SHA1 440d7ebd224f8c40423934d120bf934e56a4a5fb
SHA512 5bf045aa2ecf7989ebb9076b0ea396bf09ffddf37c3ab4e24ddd178097b7b6c10109105077ff38aede4623a2345fc8c430d2d26d6f65a4952e78333fc80fb93b
SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W3g:TL6EK9zmzrfRmBEyPbP/W
TLSH
T19D722B8E9F502607C5B347B374CD93526D14A31E833BEE572BA404B4ED4359EE052F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.comp.teardomon.gm/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download