0739b7fa1b015a385dfe89172149f81b25a953a6bd627723c1ac78b5b98f8724

Analysis

max time kernel
47s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
19/07/2026, 06:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CaddyELD-Driver-Testing.apk
Size 4.5MB
Sample260719-g3jsraf19x
SHA256 0739b7fa1b015a385dfe89172149f81b25a953a6bd627723c1ac78b5b98f8724
MD5 4aab5bca2b71ecf5730c11a6836029fc
SHA1 91ccc74a0fdc920c617a3ce67554216838c12f51
SHA512 e463f8d48ac6e55b1be498a0d70e2c4d4ae9272dfc0b302a4b2a7f89fe92afd243d0322c72fa8de937b6b97d978d0eea5e8a2ad869165d138fa2235a412a6122
SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCI1Z45/SmuluF:eZjJk75T15b6tUk6z8RdCI0kC
TLSH
T150261242E3E46D2FCC7786361FFB972916818E12C696D3038A68721C2DBBAC44F55BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.truckingcaddy.caddyeld.driver

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.truckingcaddy.caddyeld.driver

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.truckingcaddy.caddyeld.driver

com.truckingcaddy.caddyeld.driver
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4780

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads