449f2fe55aa42c832b5e770f4a12e6debe047bbc7cea0b9aaa4857cd89eafeeb

Analysis

max time kernel
46s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
23/06/2026, 18:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Tirupati.apk
Size 19.2MB
Sample260623-wwp4hsfs2v
SHA256 449f2fe55aa42c832b5e770f4a12e6debe047bbc7cea0b9aaa4857cd89eafeeb
MD5 13ff8ecd3742c1fe338c14cb63b98f35
SHA1 0aa8e5bc7960a5e0f56f2b409aa1d5673bf92aa7
SHA512 598532ff186ef42b4251168cfe83875e9754c766a63a8dba2b41cab15330a8d5c1394b23ca402e9a22d485c987575a1ad92baf56899d8355d1a2479095bd4792
SSDEEP 393216:ZukxBg0aECNCWzP06iqRqE1ow4ixuEK+RrvADMdJh+jlbGH9eyzfl6:Z9TFaEKzPMkjBxuy9oQJaEo
TLSH
T104172386F7AC992FC8771072CCAB5233626A4D15C643A3476944376C68B36ECCF59BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tirupati.mobonline

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.tirupati.mobonline

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tirupati.mobonline

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.tirupati.mobonline

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.tirupati.mobonline

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tirupati.mobonline

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tirupati.mobonline

com.tirupati.mobonline
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5025

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.tirupati.mobonline/databases/com.google.android.datatransport.events
Size 56KB
SHA256 407e7b17471e2c147fd0c18a216d7b87c352cfcef3dd3e7929ebfd9f502c2da3
MD5 3220ffd5015df3552a046105613322d9
SHA1 de1f2e561625abfb5b9c250bffd77d0aec71aa8c
SHA512 9e80aafcb6bcf8da23895d604707307203b605086239d052623612a2988274846eecd0a8a8e060215d320435804097a8e3fd91837ba8d50a325041a3ec985f04
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSI:8MEX0wIyNjaI
TLSH
T1C543639D1E2C2221C97E283ED3E143635B7C93DF5723926239908CF98DC206974358AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tirupati.mobonline/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 0257357eb201b02284a185b7efb22e1fa47bfb59d927caa85f7397c9351c9a8b
MD5 c6262d3b5628e6f5cbecfd00bffeffa1
SHA1 33a5dd804632cb81485cd921ef21125a850045f9
SHA512 1305e1cb5676b986cfe60fd8f36d3407dfb56fbc1736108946a59c6c40b84bae208c3e37da87c667d1787298abce7469de8dad881f96f0bf0f10aad574d56bc8
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tirupati.mobonline/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 fb5a830953532c848a15a81ea2b9110c2b2c6453bbf02def36b0d388be8810de
MD5 e52ba7a48a2b7e8b8f18defb46abc293
SHA1 19f6abe0173159b3ade7264899bfb9e04fc81a86
SHA512 05a003a934f91e452016452546790ba5ae50d1f35dd5f7b75c85f56b0c3f3059e7f43fb5338fec15257a07b6ddcc913fa7222fc6358b4327b6b4d0a095323a3a
SSDEEP 6:7+/l9En1Dg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKU60n:7+tEqLiuWdwRmBEyPbW0
TLSH
T12702228DF7800832C82A16B7A0D4C3480E20F71982A1CB87556008983D034CDA4A0D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tirupati.mobonline/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 aebbf18a4ec1edf01653bc50284c6d1cd3f806e34565aeb1b9647a1a1ae4402a
MD5 bcdcd7afbdee7617d185bc7ac987cc8a
SHA1 e5a020713d262d100cd338ca0bfee416c46111ae
SHA512 595d7168f1e121c7962e95450527a8934d827a6a27bee926685cbe842d6bb64a60f1b3a05e1016d2002ec2229b71235c804d1961ffac61b3f411dbf0c28ad988
SSDEEP 6:7+/l9Pwl4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8wa/w:7+ttwiqLJdTRmBEyPblwqw
TLSH
T1000212C967410913C51E67B792D983962E60A71983B3CB5719B108987D46ACCE8A1E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 16e8ba3529919cb71ad8003c797a33f566113c68ec045ddc21055928f815690d
MD5 40b6fab9ec0c640cc8c0eae978b9e4bb
SHA1 3cfee18361abb944fe8b27ecf14f07ded4f66e14
SHA512 1301dc1e760d481bce73727ca1a1baef58d49cb7ea0b006ab05d97db6ba4a16a8864802e0e1b24bcfbfa0684710673fb8540727f491e0c88f9a4f95b14674ec4
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6waN:TLiEy9zmzrfRmBEyPbP/P+/0Fl6w6Pn7
TLSH
T1F27268CDBB109703D27347B6B0CF93E11C30B3188323DA073B541568AC421C86052F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 269802a8876f916a9857e7fb0382124b1a4f66e1d8799169edec8d1fc6840464
MD5 e8a4d07005606ee7f0f36dc23b34986c
SHA1 10be72ffe6c7953099ebfe24bea7eccb84de2619
SHA512 e80b02d77ab94f145ceed23f7211008cb088c77bc49309b1fad9c2c36692f31f44d53f1e6a3d3a9e3b4af1911c54b17bcce955733733ab34fc2c4cfe5c9bdb97
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlhkw+/0Fl6w6Pn7:TLQpmzr0GSP/h1499FvZlFU7
TLSH
T19A7224CDBA10D703E2730B75A0CFD3D12C3572264723D50739012B2C6D426C56022F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 f1dbc12da6f9121ade1ca0ad0298057aa2c118c530c417a5f53ef8e3c656fa98
MD5 6dd66fdeb2d7678bf10e7bcacadfbb8a
SHA1 dcc1ea62897b2af31fd58ccebb02b9982d913e3f
SHA512 2622a30149d2cf009968f4a669a5137951695f232fedc6b7a2a2f727e37e8522fccceb0302ef9772e0e3c772cf48260561b036a15cc3e4a39ea230dc245d37e8
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/JOLabCAURw2sWlnB/449blqYFlhkw+/0Fl6w6Pn7:TLEvpmzr0GSP/JKabC3J0499FvZlFU7
TLSH
T177724D89B6A4CA03F3774B39A0CFE7D2283872A20B23D6073D022B1C6C423869121F56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 d23910391c5e0e4a0e9021e87245699ab47bacf05f424ed557ba1c7a37085d37
MD5 09624d3273fb2e252cdaecf6ff249d7f
SHA1 f062a84e0150fdf173ce040a329b91411853d88e
SHA512 e4b36897381d279496353138988a276921aa36e62e6a03d7a821ab79d65601a9d635e502200c7b741d80562e54b60a39f6c0741797492acbf306434a6068e08b
SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/uOLabCAURw2sWlnB/449blqYFlhkw+/0Fl6w6Pnv:TL6Xpmzr0GSP/uKabC3J0499FvZlFUv
TLSH
T16172F289B664DA13F3734B79A1CBD6C1383972624727DA1739062B1C6C423869031F55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 1118f9da4012fca0aae74ebd98bd108ff6d4f37e380b90380800ca825876a7b4
MD5 7f90b345b98fd402a8fe0ca6620b8774
SHA1 eb3dfc92b73bb16d823eec5d25f48faa19ba5582
SHA512 3ece1579c82e70caee93374d77b0f17e7c61928d52f0d4bf4bde81ebe317fd3dcdb30ee5bbf699ffe3458506be0ae82faaa1ce13c4382f491eec2c3c90fe6c2f
SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W4LCtt:TL6EK9zmzrfRmBEyPbP/W42tt
TLSH
T1AC722B8E9F103603C5770777B4CE93916D24A21D8337DE572FA404B4AE43549E051F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tirupati.mobonline/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download