2759902ba5046699d8e0d18271b8df2612d830e008f0728b6911d439a99c330e

Analysis

max time kernel
23s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
21/07/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Odobook-1.1.3.apk
Size 12.0MB
Sample260721-vrkgssfl7x
SHA256 2759902ba5046699d8e0d18271b8df2612d830e008f0728b6911d439a99c330e
MD5 10817ca71b61f06288364470437c11b8
SHA1 7f409329c035afdd7b99410778e296acbd2a28ba
SHA512 c967d8aae513714355c2a139e2740e2cb6e0a5e3d41e8364cb83242c1f50e971d44d384c75318d6c942262d8b4ab7e540a3a9c6686faee1f27787a44e493de27
SSDEEP 196608:NERD7UTxwUVvSbYed4K/nT1K93QGIb8rvjcLmE/Ty0K44exVb9+jgDOGDe:Okn7zGT1K9AFgjop/Ty0K4rb9CgCGy
TLSH
T108C62383F7A8AE5FC87781321A8F2730125A4E66CB62D3835508376D7D736E80E55BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.odobook

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	app.odobook

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	app.odobook

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.odobook

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.odobook

app.odobook
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5047

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 6fa99657c651e006783e9255076a11f71b564c958ce220bc01f2c732e335429a
MD5 4148c3a69416fd7571e9aecaf2291b72
SHA1 427deca87e10be14d6252e625eb7eed5bc5169a8
SHA512 67ae214cfe8d11fa10058352c00919e20268f74af37a5425c3fc06918dd423035bfe59c880c890b33c4cfab7a376a0008fd3dc86fc1d7ee2d54c0d9de3364bfe
SSDEEP 6:l9bNFlkls1Q9P0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/L/vJ+/b:TL6EQ97LzmzsRmBEyPbP/DvJ+/0Fl6xL
TLSH
T1D0722BCD5E10E603E127073A70CB93E61E38A11E4377965B3A7409789D531C8B152F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 6ec6c77daeedb9c871cfa5bc50d757b56f2773bfd216e7c1e96ee9dfffd82fac
MD5 897820f1c66f1985971e13d8ff1c36af
SHA1 eda61807440817fdee1595147bc02f7c152f8d5b
SHA512 48559680ccd2771debf9aaa3234a9c8b28cb2df86d7abb31703ffc81cc3e600b6b5f7f937c825aa339c1015e027af3c9d3288e9a5fd8f17b09e304acbe439987
SSDEEP 12:TL6UET7LzmzsRmBEyPbP/h1V49blqYFlesLvJ+/0Fl6xL:TL63Hmz3GSP/h1V499FjLvJlFI
TLSH
T12972F68EBA24D612E2770B3A60CBA3D22938711A476B96173A250A3C5D433C4A161F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 e63691396c556749976a0f07d9df9d559e7abe325025f6638d3c4e25e7972bcc
MD5 f66923dd1de757a9c61f8416e971371f
SHA1 e8b5b57cc6a5b82f385e025fa325df19cc454cf7
SHA512 d8ed14b78f4870a926da3361429fab167d1154a95c2c96f9be9dc691ddb385a404b96ad8a38568262ba5d43ae2410c96ffc2ac886e54580d3d80f58fb4dec4e6
SSDEEP 12:TLUEe97LzmzsRmBEyPbP/O0/XOLabCAUEWlCuUyWlTgCm49blqYFlesLvJ+/0Flq:TLYHmz3GSP/RKabCCbo499FjLvJlFI
TLSH
T1C672F189B978D652E2774B3D61CBE2D22A38706B076BE25339161B3C6D43384A121B46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 a1e8ff81be9b5439fa4b79ad3d931b22eb102d9f0e1e8fed4ba77775eb403c39
MD5 0f8319bfec90c8bd637bc393cd050024
SHA1 74ce870a69e4971c3af3649d4328b4ddda1467a9
SHA512 d62893636d6741eced2ca459958199509a009098729e20a19aa53118489226acfe44e0b4ead54dc1c4c52e839235a445645effec9923f07bc4f22885ab357789
SSDEEP 12:TL08EJ7LzmzsRmBEyPbP/JKPZOLabCAUEWlCuUyWlTgCm49blqYFlesLvJ+/0FlA:TL0VHmz3GSP/IxKabCCbo499FjLvJlFW
TLSH
T1D072F189B978D662E27B4B3D61CAE2D229387067036BE21339161B2C6D43384A261B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 7fe8709d3deb09661c9b9de84f6b6f4ff987bc87f68f5235fcd6044dcf0ff135
MD5 0a497376fa47bdc82c6c6972cec54920
SHA1 32af615822012937cae5bb751d312d2513ba430b
SHA512 a8e254def79ee03b2b8d981b21f596b2db4a65e29ec78afca0e0e8d829ba334604d8af0c112e67a69c7ddb24e32eedf3f0a3ae0e296901ce4ac60b5531aad402
SSDEEP 6:l9bNFlils1QP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/WR/rjy//:TLIEQ7LzmzsRmBEyPbP/WV+
TLSH
T1CC7226CE8F106613C163077A748A53961F28A11E8377AA532BB40868AE53688F091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.odobook/databases/google_app_measurement_local.db
Size 16KB
SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
MD5 d5d65a0b4c6e6db83f30d16e24a0d306
SHA1 a768e9b3d93efae0ef42a9bdb203be9f2ee824d4
SHA512 b94841e2c87dfc2383e0adfe8bac6a5813a9faad61edbe953f4e953828cdeeba631ed0dc45e698dd680ccefc3fa6930f53483dcbc26149a3a6f26f9badcd1ef5
SSDEEP 6:l9bNFleLIls19P0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDE97LzmzsRmBEyPbBvOwVQ
TLSH
T1BC72D8CD8F10A716C5170337608AD3955F78951E83679647266408646E52198B051E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download