aafd4bf6ab06f56fb27caad14571629197c4b740dc8a6a02ff7ae08b538c01d3

Analysis

user interaction
yes
max time kernel
31s
max time network
35s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
20/07/2026, 10:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app-arm64-v8a-release.apk
Size 30.4MB
Sample260720-mklsaahv2t
SHA256 aafd4bf6ab06f56fb27caad14571629197c4b740dc8a6a02ff7ae08b538c01d3
MD5 d3d1a4b6282cb5fcf19e8339f36a4095
SHA1 84f82e5f462679ecea2816bd47cf15eec1fe49b5
SHA512 6e8ccd5979128acd20b81e93be5a3287a59f817bea64331bf0a86a21dcfe00c226aa98d66d8dc680a69ee9020c7c075a51b1fd941ba8b8c6e4192f938fff62bd
SSDEEP 786432:2xsC+D1+eqJfKMgncnR5dFkQglVwBbhh7hhLesc:2GCNK0nRNwlVwBbhh7hhQ
TLSH
T1B067CF0AE91CC532E5DFF17C5E2A0727B1396C6446A9C15ABC1CB208FFA72E445B2BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	it.ottaviomiele.chd

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4176	it.ottaviomiele.chd
/system_ext/framework/androidx.window.extensions.jar	4176	it.ottaviomiele.chd
/system_ext/framework/androidx.window.sidecar.jar	4176	it.ottaviomiele.chd
/system_ext/framework/androidx.window.sidecar.jar	4176	it.ottaviomiele.chd
/data/user/0/it.ottaviomiele.chd/cache/1762298034389.jar	4176	it.ottaviomiele.chd
/data/user/0/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/pcam.jar	4176	it.ottaviomiele.chd

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	it.ottaviomiele.chd

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	it.ottaviomiele.chd

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	it.ottaviomiele.chd

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	it.ottaviomiele.chd

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	it.ottaviomiele.chd

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	it.ottaviomiele.chd

it.ottaviomiele.chd
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4176

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

libdBBFB90C22EE2.so

Path /data/data/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/libdBBFB90C22EE2.so
Size 483KB
SHA256 83f1b5718945bd79791871f8ab55d7d90517c5aaa07c2720389b72f879a0a643
MD5 46d7839d576364f5e2f82dcd08159cb7
SHA1 bbfb90c22ee2138952e5d537f55ffcdf0faf58e0
SHA512 dc9303492287d150c0fdbe75f2e83585a578280c5aaff6ce7237338159d50b7f119aed65fb083d237313895fb687ab5994859614210c672c84e38ccc1990a98f
SSDEEP 6144:XFswPvlKx7k7w5sRD2edsDDEA6G8VrwKoTrhnNs4TLZlabCg1SJz5Wu:JKNshoEDG8lToT1nO4THabf1zu
TLSH
T118B45C03FBB904E8F5DBE9341ACA6212DE6DFC05832434AFCA9A47403F56B64772A745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pcam.vdex

Path /data/data/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/oat/x86_64/pcam.vdex
Size 532B
SHA256 1b96c4c7d95559b1a8c1fa90584965a240ceec494d19774f83afac8981d3794f
MD5 38f209323a2ae51f5427ae2e8a276221
SHA1 fecb1fce34e3775cbf54577e7b33db9c746cd542
SHA512 d72c292adc47cc654f70e99ddba7915d283e7c47b2519c1c6549a92afdb9003c49dd20d0e8dd5fea94272f7ee6956d544c9229b53a4c278333a9cf45801c8602
TLSH
T16DF02BB0CF56B439E43E60755F3C026054B646A614633EED540F119152C573B62F14E9
MD5 SHA1 SHA512 TLSH

Submit Download

pcam.jar

Path /data/data/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/pcam.jar
Size 544KB
SHA256 1b62876265f6f1d336677ee9458a2a13fed4af23335b0d1017da08d0b74fb166
MD5 f15e88ab9bd9c0cb9daae37cbe31ce5b
SHA1 69f80cb142bcaf21db8c26cdb85b2d2a3530ae79
SHA512 d014ed3684017f86a3f0b9450d7d8db531fe15c316f9005ec7af16e15a7a98b472ae4cc89422d794bf24894d8c1532c3816afa4ecbecf34c97e855439fe43d07
SSDEEP 6144:NFswPvlKx7k7w5sRD2edsDDEA6G8VrwKoTrhnNs4TLZlabCg1SJz5WuAaH:/KNshoEDG8lToT1nO4THabf1zuAk
TLSH
T1C9C46C03FBB904E8F5DBE9341ACA6212DE6DFD04832434AFCA9A47403F56B64772A745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pcbc

Path /data/data/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/pcbc
Size 24KB
SHA256 5432e81a37e20e94ac02aff3758c9b351989c10f9aa8a778d86bc92ddbb3c8eb
MD5 376a56f9eb0363398a0ff295e63985d5
SHA1 c2c819b42843b4de996d61b0eabbd18fa29b5e67
SHA512 29d11ebf67be65c6eb15383a07c066d0640019794bcab839fdc7f4df66f3c4ed2fea3780bf2a448709e0efa9d5744d8f7a01c88219cb6fe33ede7b8ea29c78ff
SSDEEP 768:vedOMUU2pqEEgff1qKwlXECbWwPPfdsJW4:velU1pq/lvbHdsJW4
TLSH
T1FCB2E1D3E0552BB6C18FC67883996DEA517F390B2E95E49DB73B1DC201C00C2DA6561F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1762298034389.jar

Path /data/data/it.ottaviomiele.chd/cache/1762298034389.jar
Size 10KB
SHA256 8d4cd614e000d6431d6d607fcf96f65a041e53aaeef41891d584a4554fd356b1
MD5 180486db43d2a88e1814ec7293cb0842
SHA1 6c85378cf187e12a76c14df0ce436903e85f768b
SHA512 3475ccf6f2931326df61c66f0cba5e37d8b28574c5e62bf02389e922e9d7277f534b7e4938419f0ee61737b8ca1fdca7870887eb3fc75c691f07fad07ec74d7e
SSDEEP 192:nuC/hA0+eC20ea4OlrpCdAAq2zV5yvH1CHiJbjh94AM7GUod:n3ZA03yZldCdxDv88IAyz
TLSH
T1DC32BFC81F6DD023D40F9D3435B3907A6185164963278DEFB688EEA03846D2339F79AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1762298034389.vdex

Path /data/data/it.ottaviomiele.chd/cache/oat/x86_64/1762298034389.vdex
Size 1012B
SHA256 74cb0cc57b796bb2ba3a7e4f268900f0489a42b7bd4208919dfb102508432be5
MD5 fd2a454cf0c80d3b3fbcba73d3f9eeb9
SHA1 bf6bee5c02d461ef63e214b24b40836d336505a5
SHA512 7b07e416f8e813f7c33cdcf92a53f8ad65121ab336157a16abff76163b951627ad8753d23f8c35ecda7e3e2e7d9b0d46ee5c16980b3b87ef4e5f065600606124
TLSH
T10C119C4FFE4E3412E0D9B5BB359B2510A063C337995D7C8ABAA0C53270696B1E81A50B
MD5 SHA1 SHA512 TLSH

Submit Download

FlutterSharedPreferences.preferences_pb.tmp

Path /data/data/it.ottaviomiele.chd/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
Size 17B
SHA256 9b275a1b758e4552830fcfc603aae1e7e205de6e78fecf614ba6c8bed84ae665
MD5 f405dc94efa24454588576dba014ec8c
SHA1 c309030cf88d61f0a28830c715c2e4caae02e420
SHA512 ce7690509cf0d4ebaddba9b45fb798f7edca020d46f932fc7d16ae957bfc3b56e38a64c853cf60a4b18ee3745b19658095e46e1aba1b0713fd9d37a41ff10ec4
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/it.ottaviomiele.chd/files/profileInstalled
Size 24B
SHA256 ec40c3e4213733b7bc2f6ff701d105abb766acfddd49ab9214b59bd2c75a54df
MD5 a7e65ed1946c0f5f4325f70dc72c9b39
SHA1 17be29bdbc420db4f5864c8a9a520c6edefdc804
SHA512 e50e0b1fe1384168818389ad2be0462757d39bad2ccff4372c4369e4f2ab12a27d0ec25e657fca3ef7d0456361eaec00e4c7f3201886b6dfd4fae0977610f7f0
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/it.ottaviomiele.chd/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 1d0c981384b6e5b80ab756fedec3804e671eca83d71cb295931939809bfe2cb2
MD5 a7ce3c41662577860a4d135b395ff4e2
SHA1 7363c4a10190b5e1c370bc15e0ed4f48209e7520
SHA512 032127a7c72654ee6480ddeb19b927ca2f6b153629a89ca719549f67145f90744da3dfa3189671a19370bef7d39aaa2149563989e32a9f4d51f54d437e29aadf
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/it.ottaviomiele.chd/no_backup/androidx.work.workdb
Size 4KB
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
TLSH
T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/it.ottaviomiele.chd/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 b3b11fef2f1f810f4cdce9cc2e3aa6d778b019a0a00aededb4b9a9a12698b3b5
MD5 1c5b690735f432306cf2fd965aeb0c2f
SHA1 733207e11258a53d8570eaf10e09435a20d9da94
SHA512 123702380e6bc1bbae9efc0e2829e81081295a95949a8c835eb544be331684962e77321b38df8ea16474eb66b8d9a5faec04a0dc35d568eb4595ec31d18e80f8
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/it.ottaviomiele.chd/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/it.ottaviomiele.chd/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 ac1812b5e9abb5995929bff05ac8ce6bdbc44d5704cb6828735291bb62d809e2
MD5 2f0a4e3d7d04f732e29635aa9ff5dd1b
SHA1 5ff59edf2971d6a7dce4bacc5bb0581354fbe83b
SHA512 72dcac679bae39e1335227fb40d7267b3d7e213928a15177227086c82a03bd5c47e78420ffec1303b2d110c09cd1285af9e0fffd4b5a01804e5b7624f10c9f9d
SSDEEP 6:K0rmIwlc1l9FZdKEAlOERX4PBX4ogLugMBX4suuK+/o6at41ce1b1IhB/+Ow2:K0WqBzdKBRmBEyPbP/J1cS1Ihp+Ow2
TLSH
T12372C266A2C30A4BE189523654D4C3900D60E7585397CF0B167025143CC27C8F4E0E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/it.ottaviomiele.chd/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 aa04de010ce2ba8ea0a9f53a39deecdf36759e90d2f8f09f66c57ac906916e2a
MD5 fe0eef6b4eaba5b7799f1d5f7cbc8db2
SHA1 e9bf9d55935fa19807369da363389b6b139dd263
SHA512 162c9e9b13086f5563162fc4d46e381d714fd08b832f51b6b92cb84c0362af5ca44707cf318492ddee133c8bb0671d6ed92a95440748ac6f3a02a4b555db2a12
SSDEEP 48:ceSY66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchIb:cF6+hdjnHtDRMpf8UzS6+BD8q0ExPmga
TLSH
T144B3004F0F4B2500C4D964F0A5900FA17D3EC12E8797E7E565A11075BEC6920EE69CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/it.ottaviomiele.chd/primary.prof
Size 1KB
SHA256 fbf539517efd41204446f06183d3ecefe9847ed4d0669b703e91e01cddf03e0a
MD5 be9030aa4f3b5cd27baebcaefeeac041
SHA1 f1db01c750f6468729d528ab712e43731063cd63
SHA512 b226735b526130132262e10cb9f7b5546e1d50b4d32e5454598d5eba5faeb4193dd2fdc2eaf863c1a09c06421af9abb2650e11bfa1dae3f64f27915b3d0433c4
TLSH
T14A112C6B9196CE51F0305474D940336413FFEC944A86EA03D822CFF33CC1971911188F
MD5 SHA1 SHA512 TLSH

Submit Download

pcam.jar

Path /data/user/0/it.ottaviomiele.chd/app_pccache/6/69F80CB142BCAF21DB8C26CDB85B2D2A3530AE79/pcam.jar
Size 32KB
SHA256 1d44caaad2062cbc7152141a760344f2078a29276082844775a4a0281baa8f59
MD5 40d7945bf821068fb9b616bd2e433000
SHA1 347edd9438e362ef6558b58c173a45303820626f
SHA512 276b161be35c43d445e3d4d71efa5c4c9eacb08e00e6a39a27ad66b431e186a54f6c3501dcafeb229fd2735a6e09696046631e9ce5cb317276e5029763c77d72
SSDEEP 384:mOL7qlEzxQx/mOjQ/o6Z5EmGQhAds783q3nXwn5eiJ+EyyLgq5ArGu3A:RHDFm/bjb6Zzm+863XwoDEgwA65
TLSH
T167E23913B6008E66E95FE7BC40DB67A09730E6AE536BE3830144C565AFC32D1EF469E1
MD5 SHA1 SHA512 SSDEEP TLSH

Download

1762298034389.jar

Path /data/user/0/it.ottaviomiele.chd/cache/1762298034389.jar
Size 23KB
SHA256 d01347b7cbce666dacdcc77b9a2772c7df6ce0716d080b50a0445749d2f18835
MD5 da56e90c66866364387b722ab743931c
SHA1 51ba066e4dd30eeee21cf66dcfec4c4c36ee0fdd
SHA512 1c77b84031611e2f6289defa162229ca45d2aff6b37290c4e3466363b90ea2aa85fa487378bcfb2f10cd429e216d533b61ac980d217636239691869a505a4422
SSDEEP 384:bwxay0pH1K3ck14UwZqzM9qYJeHI1CL0xGZvORTl1xplhF0iPGUcs9AjE2leu5Yq:bw0LVK3cHn9+XsuYkMk/1sbDl+wW
TLSH
T112B2D843B38184A6F97CADBE687E9780AF24F2304C27A7075845E7AEEED97C15D418C4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads