a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38

Resubmissions

08/07/2026, 14:27

260708-rsh4ksgt9s7

08/07/2026, 13:54

260708-q7xpvaf18w7

Analysis

max time kernel
149s
max time network
153s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
08/07/2026, 13:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
barcelonaled.com.apk
Size 9.4MB
Sample260708-q7xpvaf18w
SHA256 a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38
MD5 f07141b1cbca19a716b3e520cc3e2785
SHA1 58361eae1eb962c5df9ddd11a0f8dd7ae4b7c494
SHA512 46fee2ccf73cb012c097b73f1f1ef2dba2e3c87882d8c487a04fbef25e1112e580f135fc4f90bf2bb82437871487893956a2a4ab884387eb9f788a37dad1a137
SSDEEP 98304:+Z3QvZXlCcQr1iL2v2mhgHxe5ctrKgfG9SCWlJPwzKw/xtZbhxKtGvZQPLN7fZ:drNK7vBh+xe5cbfuQPwR7ZbhkGvZsLX
TLSH
T1B3A6D012F3054E32C4AD667978BA4744B336AD86DF8357431904B1B8ADB72E07F926CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.hahegayi.compress

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.hahegayi.compress/app_cruel/ooq.json	4309	com.hahegayi.compress

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.hahegayi.compress

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.hahegayi.compress

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.hahegayi.compress

com.hahegayi.compress
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4309

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ooq.vdex

Path /data/data/com.hahegayi.compress/app_cruel/oat/x86_64/ooq.vdex
Size 30KB
SHA256 78ad0b5d91640a4a009ae31c24c473454f57c352226b21624b153ba5d4bed0d4
MD5 20b3583aaccf9bc503df4ffc55957980
SHA1 581e9ecc7cd5cbb5785cf1d338b7df0515b852e2
SHA512 ef412ee2070b13f363ddb939c8ca37ecc6341ffbadb4e534078e49282cbff4cef2c13a2e74ecd4c08277b5355efb23f5d5bc0495c625b696f1c8cce72c48746b
SSDEEP 384:bUXccIwtT9ZJO1ijTgSXSL++rINrI2KAZqTsFsK0fSixCAkz2P4:bUXccIwtTvQWTxg5wrI2KAZ8yb0fGJ2A
TLSH
T1C8D209AFB4D44F36C2C9E13EC6FA43FBAA8B0367C513E1EB82C1CD322626525566C515
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ooq.json

Path /data/data/com.hahegayi.compress/app_cruel/ooq.json
Size 697KB
SHA256 deb33071799a0678fe4303c1634f48e094ac6fa761887fee9c52aadcc0178941
MD5 d2f04da84dd8d78df7f2cb257d8efb3a
SHA1 7f54694247696d1b5dd925267fa94ebfc583a5bb
SHA512 90bef9428a5164a32a51a36bc0ed008c9a22cb3f6f3e7d991962e0161f0a6a594309882b2fa00106e6b1b322cd898ec99816e5a5d683d7db73e7c9abadeecfdf
SSDEEP 12288:OHFxV2bdvKQye310fZDC0xPXKVoDCiHaFPwuCwx8T+MmMl20wh5GKj/AI:OPsb10e3CfZ1PXKVomi6FYu58TVDE0uL
TLSH
T159E42381FA1A1B31FED054B643FB78971F2D39FB4C79B285158912898FD259AD032347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ooq.json

Path /data/data/com.hahegayi.compress/app_cruel/ooq.json
Size 697KB
SHA256 c5dff6ab2af7f75d3b6bd8a217ddade888ca1ad6e07c7219b164dcf2de6a6c29
MD5 59613eabe32f7a2e9b972db3764a7965
SHA1 e67c4d8fe85dde14a3d43bccdf3e22ab3c53ba9e
SHA512 bb728b2938490abcd26ee077321bd01f99e76d6b6cfe448123d7e5a6fcd2992c281117880517b6a552a9bbaae73c962c829288c072afea6dbfe7346c8b5c65be
SSDEEP 12288:s20qX3MhYKUC7v77gnU8YInxKyprqm5HhKcahNGZKwIjKyZoP2P:X0qX3jJAvvgnV7nxKmrb5Bv0NjNZV
TLSH
T181E42306714B6191EB46F1A734B08B47ECFE659D67CC802870CECB19D3EEB728D5219A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.4309.tmp

Path /data/data/com.hahegayi.compress/cache/oat_primary/x86_64/base.4309.tmp
Size 12KB
SHA256 0172dd640c7e6c503d39fe5f4d1cd842bbdb72a046d0d5a762b9e5ebd2927aa3
MD5 61210ccf2946ff747284f8a926f8325a
SHA1 73e305e1c05b531672479ab8368cb5b7c00b8724
SHA512 7b069f6a1e1dd18e5327f4425e99bbc5d1b43c5aa3790804ad204dd8179cad36c5c3df5c42688bbe43b63650ded87fdec0e3b76f1d2117faa810dc0d15be140e
SSDEEP 96:MHYWEBvAni8GP/yM10Q+9WbrX1j4DFfqOXNIZ8wCwUmFMybYmypykKoHzsrW:M4luneP/OY1gFHwIwUmFRafTs6
TLSH
T1104295E3956694F0C26B3AF5D5961504FFBB04702805AF38C6B1973F2E42B08DF61B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.hahegayi.compress/files/profileInstalled
Size 24B
SHA256 31c9444f13b5310d03b2a4971248b5e7f4ada6f4de269e11c6c74f87c34c8b4e
MD5 5b46c1c911a06bd102291f01285f8c4c
SHA1 395b7f363b752a89ee8a3cb0cc0a6c3f52646a2c
SHA512 968e554fcefb339a0c01fe0c86d36a5570456c9e9e069ec5a2307c1c4ea0e25a5f7ba9d12058924ba2e5f3d4ba4e56571653929f94f1d7dc43bbc90f6b5bf234
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.hahegayi.compress/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 aacead1b4f6febd0178bb78c0b4b74b744cb52c81bd6c8280770d5115b1093a2
MD5 c4527560113764025fbe3c69766d11ac
SHA1 f6498c5dc5756b3f5e8b1652913d1b03c45d9d70
SHA512 92c3ddd803d31c47ba850c54a37ccdc1621db050bd9776dbffbfbd5ed8e8af40ad685f07e5e8b936cafc775766ffa0e94c835d682e3f2c24dd6f5df69f4fae83
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.hahegayi.compress/primary.prof
Size 1KB
SHA256 163b6b0ece61fce162bcca30e7e3033c5d727739ce244f12a360c7a965297648
MD5 dd1654392729d1d57f1c4ab43154d1e3
SHA1 e6d420004f9b02190de4d93766db4ea117d0e183
SHA512 70d23a5d9bf1c72dd34956db2a7d02d96605b9030bed7bb807dcaca33f8604e6f16f18222760cb108d519b3e70524c01ea8a6e472747cfd0d1b7dae596d24ecf
TLSH
T14E310A6AD5C0C5C5EC06E3B2B5CA5206EE7521126B4E4AF72A2A904FA33D2C8B154DB1
MD5 SHA1 SHA512 TLSH

Submit Download

ooq.json

Path /data/user/0/com.hahegayi.compress/app_cruel/ooq.json
Size 1.5MB
SHA256 6ee1a7048b103bb552e87c95b653af993e99c25cadfd261c7d43106516862c06
MD5 aa5682341521d879c5ecf592f0054dae
SHA1 b345260c92342d33cf58514024791efd93f0dee8
SHA512 b48a573439bdd06478a3f095b547794b5f0e4e91cb36ac49834179c4ed4b7262376b36d1ddde6b35dc08d990ad8e820829e974e3207657771c2321a18b587568
SSDEEP 24576:q1kS2JqEL2zR8phj9Kxl/Pgw+Zc0GMwAuUWsCxwcja3BdFxl:qOSd8plkPaDG8/CW
TLSH
T1C9756C0AB6F3CF48C87E62BF95EA4750333C6786BB174B91181AD9F1BC431A4EAC4549
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads