009661385bbe36cd78de4226e6e191958fda2ce321546c84ae878720bf7513f1

Analysis

max time kernel
114s
max time network
158s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
01/07/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
iBet899_2_1_6.apk
Size 4.3MB
Sample260701-akbabsay7p
SHA256 009661385bbe36cd78de4226e6e191958fda2ce321546c84ae878720bf7513f1
MD5 2a2b394cb1b618f7e098156facf5e71f
SHA1 8622088f4a5fcd1e37bd07a78dfce04299002948
SHA512 b23303b50be28564cd2c9e8c33777fa3317e3296cdf430c11f8ad8f472fd5037649c6f6c7afb13869dc4e1f3d72c517bffe1167d6a608db0e89387d301e82798
SSDEEP 98304:CCxOsDpTfyvP/o5cgV21Q4HDUk6UIk+viqg+oGGPW8HbHnx9fCpbPcjsK7/m8DT5:bxOshaQCgVf4HIkMLvun+8HDnWpLcQi5
TLSH
T15C261283F769AA2FC8B7C032199B533422568E26C753E70B645837AD387BAD80F557C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ozzo.ibet899

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ozzo.ibet899

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ozzo.ibet899

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ozzo.ibet899

com.ozzo.ibet899
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4831

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.ozzo.ibet899/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.ozzo.ibet899/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 74c0380062334905f293c24993c52fbf7490f154488b3faacd3d3a11aeb10de2
MD5 5435643f49b8de2c47672520350e8d0f
SHA1 42132d7b8576d39e7fc3d84c5b9542b2c65db67b
SHA512 ed62425a57dce8c2cab9886ae8960a4a78ae266ee0d93622d0b8f5c216355a6d6ba4f8e289e7ceddabcfc32f3c020b1beda677ac54e0e5f12b2737bf38f5b3d6
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.ozzo.ibet899/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.ibet899/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 331233b15e681ade5a3529b5ee95f5864ab8e88e235c4d9ebe829bc610bb2347
MD5 5556cced88fea2f8b43531d61b331641
SHA1 7dd3b801d511df1d7d213a28c45de85b648f54de
SHA512 0b093d2a39ad1bf09acbcd89a386f30506d7b771b51b077de0b6b4f98d0493b7c5f1dd230bbf3fbb8e8cf1b5191e19db89678521e2e762583b05e29965ed833e
SSDEEP 6:K6afCW9FZde/kPlOERX4PBX4ogLugMBX4suuK+/uD4bgOw2:K7dzdeWRmBEyPbP/uD4bgOw2
TLSH
T19672C254E3400763D91AC37364D9C306BD22AF6B576ACF0B3A5A08D06D023CC9690F08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.ibet899/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 ec9cfd6ab6d9376a6761e4af7c5f5cf343b41efe9db1c5cd1dc51ff379af2efe
MD5 1e7b1f680d2826edf8ecfd7443aed61e
SHA1 adfce12e71e3c91bc1c8668c52cee035fa8f8d48
SHA512 0c2577024a4ce18c0ead2350de8b0e4af1e9e2bba85c21848627b762f958bd583e9412cb3d90331266248e19adfe85d5100545accb2ebb6a35e2568c0bdca165
SSDEEP 96:CrJTDfNpWYnDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:8xpjndjnHt9S/f8JzSV+6D86T0ED
TLSH
T1C0B3338D0F592600C0A9A4F1E4D00FE2793F892F97A7E7D1759140F5ADC2A21ED29DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads