4b4b6323d1e72ccf3432f2d67eca54ba0006d8763119a266321692e87236f62f

Resubmissions

05/07/2026, 11:05

260705-m7b7csb1217

05/07/2026, 09:49

260705-ltn4bse17m7

Analysis

max time kernel
146s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/07/2026, 11:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
devastate_ed748a.apk
Size 52.2MB
Sample260705-m7b7csb121
SHA256 4b4b6323d1e72ccf3432f2d67eca54ba0006d8763119a266321692e87236f62f
MD5 5ae8e28f8c6978fa68118e84481f4da3
SHA1 111dfc492f89c7a3caabb314cab44ac54e41235c
SHA512 3ffc88ea4ebfac123f93e46a0b5bac8940e3f4405316ab8f47134636a484ef046e597950f638851933e4c686a08c37c747affafff18ca4b8da33452be291c0c1
SSDEEP 1572864:0idMhOITZGFZ8Tgyx1ASRRlQi//5gsNWRRlQi//5gsNvvU:0nh7VTUyx1ASRRlTuZRRlTuKU
TLSH
T1BDC73346B3A4D91FC97780351E4F98B1A27B4F2B85979B078864377C2C7B2D89E1C788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.devastate.android

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.devastate.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.devastate.android

com.devastate.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4989

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.devastate.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 7c594637db33c76594cffcbf67e0f45a3436bfe07ab534e040909a7747b57101
MD5 f285142c53153801cdfaf9f237efada1
SHA1 2b117586a3f9833e750c7dc766a2e6ec2ff809a2
SHA512 761fa5fa935d9f0075e6c29574a1da6c5c2de5daa598b2e7aed81b93121b6d00e6aad47bc934e279c97f3421d33ec16f80d673a8d084c8902f45ff57e3d780e4
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.devastate.android/primary.prof
Size 2KB
SHA256 3591b24baa614912732601b2ce88f300d2372d3aa96304931d88a788a49b669d
MD5 2146491ddf1e4b24b19e4c059ae2bb8a
SHA1 13224c78bcaac73573ba7306a931622d9b580a1f
SHA512 86e6621c084d821661fc8de91288cebffa3eca5f8b373dad534af7a7398be140edf8c02cbca25599fa5a6942f5387ebd87315379ac3d5a11359ec5a981791860
TLSH
T168514C8C3EBCBF048BDD1F2519DD18AB1C9166574C9E08CE2E583231348C6361921377
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads