8ce473b3f6c2f848a62826705eeed1e0145c9eeae7cd892886e99e1d961890ce

Analysis

max time kernel
72s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/07/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Umi55_2_1_6.apk
Size 4.3MB
Sample260706-pe9y2aez21
SHA256 8ce473b3f6c2f848a62826705eeed1e0145c9eeae7cd892886e99e1d961890ce
MD5 7b9e24123359aaf4a6af6b16bdd6d85a
SHA1 25f861dc926fb6fab80fd7d138df5d825f36ec3e
SHA512 023d887b3747f390e0792b3bf33547753b4de75293552019d6df9aa2f7ae9c1702ef677b263a21df878d6ddcd50b2fe88e3b0642893f9f811860d087cf1ce47d
SSDEEP 98304:MkN7xHXxqKrDud9Wg2X/A/mOKSIsGsW7Zys8ufbPc0Z1/mjDTZ0x:MgdlX/A/mVSlGJo1ufLc0sD1+
TLSH
T1E9261293F769592FCCB7C1320A9A133562529E22C743EB0B68683768387B7D80F957D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ozzo.Umi55

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ozzo.Umi55

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ozzo.Umi55

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ozzo.Umi55

com.ozzo.Umi55
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4786

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.ozzo.Umi55/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.ozzo.Umi55/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 1418d7ec6c5d516605623a7aad43e33bccf3e508bbe168c9c4bb5147dbf4d5d9
MD5 b4baf063b845a91362ed0c77891e0b9f
SHA1 11671ee3c91e796bbfd0eb545cba55c877bfd1ee
SHA512 014745dd2b16793ffe27bd3475f0e2da6f917a3c258e43678c81ed33fcd075177702c802cd39d7a12b6364e22045f83a5bb3d82796a3f5d5d289f81bd8a49574
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.ozzo.Umi55/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.Umi55/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 a8fc43308ae8c3997febbccc17c196b05f5345b9a7d9da474d001aab13fb1e5a
MD5 436c0e49f9b1a4899cd795a567b01d72
SHA1 1ac9120194ef054457179325002fc381bb041c6e
SHA512 2cc87ac4742f9a757775998399deb2ec1e5463b0ee12605970d40dc9d56a81f70f6bbdced9c37aea69fa2af33328049b00c749e984a66dc6b69ee84623e8d7d4
SSDEEP 6:KwK3Wy9FZde/kPlOERX4PBX4ogLugMBX4suuK+/tR4t/QW6qJPleiopo+TOw2:KwKjzdeWRmBEyPbP/Do//BX224Ow2
TLSH
T1EB72C254A3C11D33D489133390C4E3C61EA41A3D1256C74B2A820C23AC8128858A1F4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.Umi55/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 a62ec68457e41e299d86fe31751c272fc74814a6e7f6c4b8621c2c7a9136a9d6
MD5 1fcaf1a676abbe8dae97cffec46e163b
SHA1 eddb566cd4bbb3ee88adbf49104802b4da1630d2
SHA512 d3a163c2508ebe3232208ea1cc26ddc92be7d9d8c0d2ddc7ee6bfa802c0a889f377fd055dbfb3fed8d14ac8b529dfc9543964705b9a91ac27abf5687812bda9c
SSDEEP 96:R9aLmRWfDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:jiQandjnHt9S/f8JzSV+6D86T0ED
TLSH
T1A1B3628E0F992A10C0ED64B1D5D01FE17D3E452E8397E3D165910876ADC2922DE39DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads