b24ebee388a0c901fa9c2bcc8cbb608a2aa19223f4e693fdba677fb860dff398

Analysis

max time kernel
52s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
05/07/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
khuman_solutions.apk
Size 8.8MB
Sample260705-amfmtsa16l
SHA256 b24ebee388a0c901fa9c2bcc8cbb608a2aa19223f4e693fdba677fb860dff398
MD5 ad69522d2b531455f2eda504a421dd0d
SHA1 3b389231207f09ede18705db55fef5841370cd9d
SHA512 7b0be88bbd74f63bb7b99e897a4d917d2a78e07aea63c0e236039877504d196a55ed4624f48b6d808de219c22b9c9d86f2d3b3d622668b03b1d6343c670bb138
SSDEEP 196608:/TXNhwbKskJ2ibMzGUlZMr6JwvSYO2HI04j3rxDIKXTDM+ALiNHH:7PMvnixUlZMr6zYO2oLL/XHh
TLSH
T1499612D6F7D8A92FC4779132C57A52F2518B4C128A83DF436908370C69BB9D84F4ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.khuman.solutions

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.khuman.solutions

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.khuman.solutions

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.khuman.solutions

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.khuman.solutions

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.khuman.solutions

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.khuman.solutions

com.khuman.solutions
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5034

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.khuman.solutions/databases/com.google.android.datatransport.events
Size 56KB
SHA256 df9b2468da7775b2c2a965673a2de502050601b821773d5fbc1aa7ec5c6e3a88
MD5 bf1aaabd10dcdfdca3d5e424c1a9afca
SHA1 b54ce903c8d585c773ce277e23b8f8dac938da65
SHA512 8cb241cc794319cebc63fe19850fe46d95574921a93652f6b8f2a852875c58eab850e8b163e3ca6791a2fe789e3532e117e073565db274379dda67a1fd9d2802
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSs:8MEX0wIyNjas
TLSH
T1F943839D1E2C2220C57E283EC3E143635B7C93DF172392223A908CF98DC202974359A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.khuman.solutions/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 6143749e1bf55f678df7f0a4162253ff85ce1e932b7897cd9c7e94a4025dbbd6
MD5 ba516ff0c0dc9a3cd87bdc1da629a582
SHA1 91bcffcd1a5ab0bb1dfc67363c19a43a2aa63aae
SHA512 80bba3121c88787a9f0c58c030b7d8c0c7f2b182d7466aa29686399f8facfa1be5780dfe72bb6916d0aadc73437db9ef1f4205e824cde647df5cb9f96755a2ef
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.khuman.solutions/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 371af7d6e655e007919d982192764fd3b60bdb51a90710c4da34019dd4a03f3b
MD5 2c1be0717c82ef7a16028013d3a4a751
SHA1 5ccf7df99aec2762e6da1ac73c446a578f6c350a
SHA512 f4a9cc0a73475a77f00c4e3e8ce15b83e0878bce3404b7444c42cf55463ba0cfcf31e1c1596d8fbf5a31f696f0d11e4911b27e12b49234e7cf99298524132ecd
SSDEEP 6:7+/l9PBOn1CKvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKYn:7+ttBQvqLiuWdwRmBEyPbjn
TLSH
T1BA02228A63820823CA1A96B790F483410D40E719C262CB0F167008983C074CCB4E0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.khuman.solutions/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 e2e628a38317670b0e2ba2ba655a683c0e46111c5d4b191b8f876f31930c01c2
MD5 5caded9420a44e4d3b739a3b06d66f67
SHA1 9a7ec23e63d7cdf82702fd93900feffc084bf5fb
SHA512 7aea9ae527172ae89928eafec82ddbbd604be87384cf54a082ffee30fb469ebe43503a59ecf543dca495b2546fb0cf8f63f4738517aa3a3687524cb8deeecc16
SSDEEP 6:7+/l9OPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsM/Zh:7+toqLJdTRmBEyPb0f
TLSH
T1070222CE6B402813C42A27B790D883422E14AB148223CB87256008E83C87ACDA8A1D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 d4905486bfcd9a8ddb5a82e847e560ea7a2d421c6b4cd75c3ddbee4f3d9c2ae5
MD5 b58e672d150bb74c46f3bfd2e059313a
SHA1 ea801d55955eb5622b56c78b7c5410803182364f
SHA512 8b9e0b59ef053f13958b70abf8e175886755c13d8a493ba95f82d4736ba6085d1a236d4494c479df50c38f73aa13f0f76bfcc7f45213552b2770dd2a69d1c80f
SSDEEP 12:TLiEy9zmzrfRmBEyPbP/P+/0Fl6THLth7:TLApmzr0GSP/PlFW/
TLSH
T1E47268CD7A106703D173477670CB93E52C30A2188733DA473B540468AD421855042F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 8781de6e0b75d531ee711a11a4d8fa38c407566fb3239f6c775bfa35412da744
MD5 311a5ffb10622b5eeeaf2f4417434141
SHA1 980a52ecd5d27e0918954f7ed1489dca0941e5d3
SHA512 ea5c80d49c9d8e37117916a82c20a20adeea6b450b205fcb82e13f1925e293d1ffa2b3c0b80f4efb4fa367606e4fb9d1b45045375a4cca6f97f3af297a8279da
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlAq/81yF+/0Fl6THLth7:TLQpmzr0GSP/h1499Fy4FlFW/
TLSH
T1BD7259897A509B43E2730B7560CBD3E13C34B2155B23D6473D151A6C6D827D64012F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 39a11315d46953a3f4a41edbbd305be336960f4d8c533add39900eed85c93f8a
MD5 ca18dca84e329fee1e40f50809e6bd6a
SHA1 01da427357ae1ad6b51bebd36b04069aa653fd05
SHA512 c9a33fac61b3b740a7d5c1a82b2d6c6be14fc5acc5ff20c0f655b4dfb1cd1b7d5e00f61f2f7bf78b25e7284f6715ee45c69310ff7e16ab406bac372e63b78e49
SSDEEP 24:TLEvpmzr0GSP/nhKamNZ2V499Fy4FlFW/:T4vArSP/ncamNoy5y45W/
TLSH
T1A7724EC9B5A4DA43F2B34B3951CFE3E1383971561723D6933D065B1C6E437928161F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 0582a324339454750748b6b24d551686a2afc3af47874d34adbfb4fd594d7de8
MD5 96cf364014205b98e1f6b02a2c50e9ad
SHA1 ca9a948065051a6ce9385172a2d7464ea62240f5
SHA512 9b84767ff02fd811677b41c8d1cad871927daf18078f88bde8df4b0d4a862920198621adfdeb19729986861e9012e79a12112d07b3a80f6ca549dcd88b88a18c
SSDEEP 24:TL6Xpmzr0GSP/M9hKamNZ2V499Fy4FlFWb:T2XArSP/M9camNoy5y45Wb
TLSH
T13B722BC9B5A4DA43F2734B3961CBE2D13D3971561723E6533D065B1C6E427928061F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 dddd24fe03bb4916d4c74e47aa46a1d9ce3c63c745643468682e1c841d1dd01f
MD5 de50a4574b0837d2b186d808e288a2c4
SHA1 b08ec652de8687cb0d1c8d9867837149042a5529
SHA512 4a2a581a71f9d74033836701b05ce7838c3766a8158822dc1013e6793e2e9e8b1da9e720588edd0c23131ca5fb0c967b977cee3695fb87e644206790ee0a1fa9
SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W4mNt:TL6EK9zmzrfRmBEyPbP/W46t
TLSH
T15E72C28E9F103602C56606B2B4CDA3616D24E219833BAA572AA404A4AD4254AE092F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.khuman.solutions/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download