d980de5ebed09ba2ceb1314aec5b55c045c9379831fc02da3cf198318b298a6d | Triage™

Resubmissions

17/07/2026, 15:32

260717-syrtcaex3q7

17/07/2026, 13:38

260717-qxtv7sgs8v7

Analysis

max time kernel
46s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
17/07/2026, 15:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
myreserve.apk
Size 5.1MB
Sample260717-syrtcaex3q
SHA256 d980de5ebed09ba2ceb1314aec5b55c045c9379831fc02da3cf198318b298a6d
MD5 873e53906214657115c2f11c21cb45f4
SHA1 5e8bcd1bf0cdecedba3c6a2e8623f0c365873a90
SHA512 ca63e218d9befa5a8241ac3c6ccdf50ad89183df598b4dcb106adef1aa8f4e7337b2663eb08f080bb33b8e97817fd3af28043578f9e012740c8bf962e7b0bd77
SSDEEP 98304:JICgNYVCnzHAbMJqlaZn6utAYAK3sbqUtoRTuS/a:WbNkCnzHgMJql073tsptf
TLSH
T1F8360122D7A84C2ECC325C729E6B93B6504B4F42570BE71B5528BA1D2CB79A44F14FF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.myreserve.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.myreserve.app

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.myreserve.app

com.myreserve.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4877

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads