2a82f6b5d79255fb8f741970518490c1ad591c0b256bd73c5fc03c63efb9396d

Analysis

max time kernel
116s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
28/06/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hajari.apk
Size 3.6MB
Sample260628-amd41aev2r
SHA256 2a82f6b5d79255fb8f741970518490c1ad591c0b256bd73c5fc03c63efb9396d
MD5 2edba87bf4ebf92d4c4dccfd153f1756
SHA1 13f8d8150ed3c38f79be8a7fa3511a60377b7a79
SHA512 7d4d3ed00741f6c050162c78cea1bed6847354845e8024875c074dee41634dbbe49b9dee51e12cffb48e030af43066b5bdeb849f283cfab2067edce1975625a3
SSDEEP 98304:S1/3rP/vCtg4PjQI6zVkx5jMQ7L82X5lX4wLi80xyzVYgu5:SOxrQIV5jMyLXX5N7Li8xA
TLSH
T1BA060242FF68DA2FC87380331D9A073512569E1EC692A74B64DC772968376E80FC9BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.hajari.customer

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.hajari.customer

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hajari.customer

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.hajari.customer

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.hajari.customer

com.hajari.customer
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4746

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.hajari.customer/databases/com.google.android.datatransport.events
Size 56KB
SHA256 fe11a7a75862ef973e0a48d31d1a3cede9ffff877c0456879bbbb1efe4fa4b12
MD5 4365759fb1463f48fe897422762e94a6
SHA1 3d70fd67e15baeb2647f5d9ceb095fae97804837
SHA512 b31111b8b1cbc6edb37aed1521bbe2ce682c5f52a14a57e1c6229bfb208f70da00944a49731facbfa7b8299189874073364e41b24a8ee4790c1e470997c1423f
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSw:rAMEX0wIyNjaw
TLSH
T1E743639D5A2C2221C57E283ED3E143635B7C93DF572392623D908CF98DC2469B4358AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hajari.customer/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 d2d16de3e48b581951cd8a7c4c6d18eee4f38867da60d1936a725f5ec245cbd9
MD5 81005826c000c89f493b820d19eed8c1
SHA1 e228daa04eaa003c3f015b581cdb7bdb9c32e00f
SHA512 1c614fdff17a105787b4be2de0a0595c633ae4aaaa2d8cc649f6f5a6c367350f9cf12a58376f9d8fb03239f8b5249e053b44920b9e2a0a514815173149e26952
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hajari.customer/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 da5e5ee6444525fc910ed4838eef675bafc199845da98fb29e24fecedd8c07cf
MD5 7e52193e1de121ae570b3a2c77a707a9
SHA1 7595742bdf91d00c256597f8437948ad5d008db7
SHA512 2f278c0e697e4df984917e506a50d767f8a162746977f08930356056d1ce8336f4dff9cc1b8f70bffd7cd2cc4bf8c0a8de25f511be1c78cc180abe6b5e6ba0b3
SSDEEP 6:7+/l9h8JZ/SFn1yvng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK6O:7+tga8qLiuWdYRmBEyPbLO
TLSH
T18702C0AC63800813C83D177790D483580D20EF78A1B1CB171691089C3D0BECCE4B8F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hajari.customer/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 36b413afbb7e180fed49ff36cf77759967c05190ee585d829824b67fc42cce0f
MD5 821482dcb16ac25b83e277cc7164fae1
SHA1 db56390ae7e514c2739a30a7eebdd93049ad3c46
SHA512 279306cae26c24dc4253084cea9ae3b29dcb436432d1e1a74081637d16b0e5e2545af70d4c67364e1325341ecae94fefeb9cf34bc0b0111da2b4209b315dcdf4
SSDEEP 6:7+/l9YGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK4sy//A:7+t5qLJdeWRmBEyPb+SA
TLSH
T1030222D863801803C02E1777A0C883811E18AB28A223CF171A9208646D86BCCB890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation5951584180400269702tmp

Path /data/data/com.hajari.customer/files/PersistedInstallation5951584180400269702tmp
Size 570B
SHA256 aa45f2e477d42a7cdc8aae74fcdc0ee6b7b48fcd257ccd3dc51eab3f1507035b
MD5 29d81b24e4823fca887a4c9493254e29
SHA1 d5ae307bf311ff86b53aae78f085e7565ef98506
SHA512 b2f1749f36ecfdd23152f88b96f7057892686a4225962e7851adf6e8ecb8e7af357bf0285eeb2ec489bc517ba3ff15fc883ae833e734714b67d49ed1a7ec0b9b
TLSH
T1C0F0961E2568C90CC4CC71031AAF7D120C654CF12F05A0759FC8C8B1D1E1BF5C347289
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8207072762163222497tmp

Path /data/data/com.hajari.customer/files/PersistedInstallation8207072762163222497tmp
Size 90B
SHA256 ad83cd1dab8aea3fda2718c2cdd0c432444b079a2efe2fc08552b88acfe27a02
MD5 a8c467219973221c8791043e6e0a8645
SHA1 c605b3701ab7bcdb47e122d28544106f9537f29d
SHA512 17a70a7d56acff3a35ec52d398c5b529b6edf1d2d1f5ae471d23d64d2f25cdd12c3abb4397084215b2358bf9fac6c2fd6a994b62f0a516ae6361703bb2b06967
TLSH
T111B012144AB0418D888DE30A1D4DE1001E80248028198A290B1C90C400912DE9243AD5
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads