57ffc12f446b77a387b81096a02106bccb6e56d07000b75f7c503863af6c1635

Resubmissions

22/07/2026, 12:55

260722-p5ssfaeh757

22/07/2026, 10:18

260722-mbzmsashpg7

Analysis

max time kernel
142s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
22/07/2026, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rk55.apk
Size 2.9MB
Sample260722-mbzmsashpg
SHA256 57ffc12f446b77a387b81096a02106bccb6e56d07000b75f7c503863af6c1635
MD5 2d0bb9ee642b965b30f6c0225efed084
SHA1 5c9b3506f39cb42b20e83f3725ff08fac82a9907
SHA512 9c54a85c88e3e759006507a0f844a6f543652a73bf4b9affa0c9b1fa1ca335636d3e42c67205485653a25de159b378fdbd7efb1fc2b2468c86235fb1647dbb40
SSDEEP 49152:QRh6ZY9JqQ47IfdZjnNAqIlveTDmnpKaTVrodBjnNAqIlveTDmnpKaTVAvSumSc9:Qh6Z+JS8VxnWqIlvhBrodJnWqIlvhBFZ
TLSH
T1DAE50292F729B62FC837C0362D56C23521229E16CB93A703A46437BD6C7B7D80E59BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.rk55.com2

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.rk55.com2

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rk55.com2

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.rk55.com2

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.rk55.com2

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rk55.com2

com.rk55.com2
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5080

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events
Size 56KB
SHA256 cb575032efa32a4587598c1f8bd0fd07c7465d1552378cc6af1f2854097347a1
MD5 c4eb80c1a31e698a5e516b456e709982
SHA1 625fff01aa0aca7aa2c38a8094a766fc16bf52d4
SHA512 15efd8e5b01207735f43d502fbf57f38a395ab483e2489549f3363799d9613c7babe667adee027349ac9dce5ca680950e0ec438a3411ee392f09dc4700f67187
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSVC:8MEX0wIyNjaVC
TLSH
T1A943639D1E2C2221C57E283ED7E143635B7C93DF5723926239A08DF98DC2069B4358AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 0b402fc2d4e3a1d143336386eac6474444075e35002c997ed4a41f96cb0402b1
MD5 a0601a9a041a1417ea97e8ef424e4283
SHA1 13fee81f7874a648c10a4bd9147edec8123414b7
SHA512 7cf7f59af6b71645eb7a4fbec60d784a9a440a275449bc0e48f6b7449fe708b4620fca95192f16d7bd4623765379f78e392ef7924f4f8298ff35c234ee91d82f
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 69e742d8845c755e6eba96a4456f8f3828ea8d57cef9ee4d8e60a76ecee72856
MD5 fd23ee925df2893cbe6c559ba1c18a89
SHA1 29ad18c9c919ac0b8e246e7f5626d2d3dbfc406d
SHA512 203073dabd581bb642d7d5f3f48f2ef38704589767b8412144aec31a2a7403ee6c2d8743237aae457030f143659c0778baa7269e47e7d9b7bb67f7a6f6baf43d
SSDEEP 6:7+/l9gGn1Ipg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKIe:7+t+9pqLiuWdwRmBEyPbW
TLSH
T1DE02229963800E22C82956B7D0E5C3A00D20E7198261CB071AA008A83C035CCA8A0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 1f34e31b2c241f63ca978ebd0e1d08368d5677bcb52381f45cdc764d1dc1de20
MD5 e241e93ab8fceb8b1a7bb3873ecd3451
SHA1 1d918491556414d4ffd67803ad5df79a152979f2
SHA512 c83d3156e13bf7f6fd9e24693b536ef3f4e4c5e758c39fe7b119d6920e2e083a1f559f9765bf33d0e6881795a887323150bfb0d06804d1c0678cd5c7ba3c7db4
SSDEEP 6:7+/l9GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKa0//QM:7+t4qLJdTRmBEyPbUQM
TLSH
T19302808977811D53C51D97F7A0E983572E60E725F373CB5715600898BC476CCF8A1D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation2106399490421939088tmp

Path /data/data/com.rk55.com2/files/PersistedInstallation2106399490421939088tmp
Size 569B
SHA256 cb24964b16feaf31e9a3d2d58088a858dbec36a97d0f9cb089f3708db16730ad
MD5 349b2ca73ec8faee40c79c31df837235
SHA1 06c468516120bae8e3301a8a57308d91ffca1f3b
SHA512 557b4d7d38fcec347bf0ef14897d95a33241e41f8fefe762d7cfe875bc88bf5ab8790c62b86f7023c45a5a9f30ea3e216610ef465e299d30028b6aca35930b61
TLSH
T1C4F0E1ADBB448544C5A93342098E7D160D2429F1460F12BB6EA9505412A2E6FE607A90
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8660183073521878517tmp

Path /data/data/com.rk55.com2/files/PersistedInstallation8660183073521878517tmp
Size 90B
SHA256 9a245265e631e5535819afee7ec8f3e817e30b595e9c40ea9acf4961611bd9fc
MD5 f44b4db60c08606d669943e72fcbb611
SHA1 c83c69ed0eaabf85244a268327f05e5ceaa13aac
SHA512 6cbd640682ba722996e656baf5e4d86e8c5626771fd5f75b026295e49f3e7ab5af44a830406d699489a8e30e599e728472a8a4733ff0ce4a8c45f1078310441f
TLSH
T1B2B01209B77442C1DCDAA3032C9D92001EA414C1180ECF090F0C904400831D3D547AB4
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads