8f7b601a8bd29eb4871d3a7254484541fcef963c1703fe71fa146b3759bce2aa | Triage™

Analysis

max time kernel
48s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/07/2026, 06:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Coconut.apk
Size 5.6MB
Sample260707-g1dtqabv21
SHA256 8f7b601a8bd29eb4871d3a7254484541fcef963c1703fe71fa146b3759bce2aa
MD5 41d968ae9107a726f0c1e3ca8decb807
SHA1 e8ae859f6ed13913907c7688eac480e257bae517
SHA512 8f23f61ab5725fef4724cf9b86d8c9992eba4919b67389f697b54bb580298ae2fb431dc3e1a72cfa51d52dbe85f1ea9e4da739abb6ac4813111932584b6577b3
SSDEEP 98304:de4ReH5LHS1sKBV5dhHaFOunWl8mVVwZjJkdluWT1Tdba/COnsXk6zibxVBjqIfM:de4RGisuVHhHYleVwZjJk75T15b6tUkM
TLSH
T19856E0C1AEDC782ACB76423BCB66F6FD46B3DD4D868292876534F508187358C1E70AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.feefollow.teacher

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.feefollow.teacher

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.feefollow.teacher

com.feefollow.teacher
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4775

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads