57ffc12f446b77a387b81096a02106bccb6e56d07000b75f7c503863af6c1635

Resubmissions

22/07/2026, 12:55

260722-p5ssfaeh757

22/07/2026, 10:18

260722-mbzmsashpg7

Analysis

max time kernel
17s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
22/07/2026, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rk55.apk
Size 2.9MB
Sample260722-mbzmsashpg
SHA256 57ffc12f446b77a387b81096a02106bccb6e56d07000b75f7c503863af6c1635
MD5 2d0bb9ee642b965b30f6c0225efed084
SHA1 5c9b3506f39cb42b20e83f3725ff08fac82a9907
SHA512 9c54a85c88e3e759006507a0f844a6f543652a73bf4b9affa0c9b1fa1ca335636d3e42c67205485653a25de159b378fdbd7efb1fc2b2468c86235fb1647dbb40
SSDEEP 49152:QRh6ZY9JqQ47IfdZjnNAqIlveTDmnpKaTVrodBjnNAqIlveTDmnpKaTVAvSumSc9:Qh6Z+JS8VxnWqIlvhBrodJnWqIlvhBFZ
TLSH
T1DAE50292F729B62FC837C0362D56C23521229E16CB93A703A46437BD6C7B7D80E59BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.rk55.com2

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.rk55.com2

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rk55.com2

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rk55.com2

com.rk55.com2
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4829

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events
Size 56KB
SHA256 32f74d7af393e08357dad9f4c3828b1f9e2252ae61a6f8d19290b7c4e1f7e555
MD5 9ffe049525ddca56ec186ae885694680
SHA1 3861b699b5af1bdaa414eaba0781e7fac3723721
SHA512 6890b98c8ebb0628b2198016b09eea480bc8d8cafa9486812ebb65b4c32af8841bdc1ac6cad08b8b50513c3941e1119edd54b88354660e0d7174ea91ad781c78
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS8qe:rAMEX0wIyNjaJe
TLSH
T16643639D1A2C2221C57E283ED7E143635B7C93DF572392623D908DF98DC2469B4358AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 6fa943b182da62c85e2d0e85b2171b3408c81b8c16c35eb5026ca18fb9e97a28
MD5 1ec12025f91a572eed8b568413a298f1
SHA1 3a40be52e6ab0d836679660e78e486414e242205
SHA512 040eda962fac8ae2b4bf5d14ddbfd325d5b6a982737085ce55b04e2e65e23941897e35af3174096b1f8118d910855f3e2290f2c64e8d9fe079f4a03f2600c37e
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 46b792ba95f34d3cdf7861e8151e3c90d9e917aec3e4217b25c5181cfd414df9
MD5 b6e42d00de8436124633e022f24a0790
SHA1 a8737a231cf277982ae03ea53a0c131bdce33085
SHA512 e7d31524843a1d144953b59e9d5e97fd0b3fa73a729fdba7360324b1ed682ada58fb205e1d31d0d450c0cf9b3ab1412e13820ec35b02fee3456cafa36b09bba6
SSDEEP 6:7+/l9nSn1dg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKu:7+t8qLiuWdYRmBEyPbx
TLSH
T1770222C863802822CC29167B94E583800E00E72893A1CBAB969018942C074CCA4B2E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.rk55.com2/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0919feeafb13e83fe2f4c747b086a9a816bee4f76b36f0684f76454f4fc732d1
MD5 b6f391f38881babf8e6550497bbfdb95
SHA1 feda5d9a37dd20e9832487673a22bdc43a012ffa
SHA512 8745019691ebd97dda3f71af3c5f6a90046dba878e1c74d6a23a05638915a2cd6c08f8e34114c0fc5d722f4e2fca04e9d67ccee53387deb1023aaa10c48287b4
SSDEEP 6:7+/l9yIOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwU/Zn:7+torqLJdeWRmBEyPbZ0Z
TLSH
T152022289A7800833C029277BB0D8834C1E10A7299263CB07169108752C067CCA890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation6984464341592607140tmp

Path /data/data/com.rk55.com2/files/PersistedInstallation6984464341592607140tmp
Size 569B
SHA256 4c8594f59eef901be2fd0ede600c46d70cf6559e47291175cd1978c9f2d1f2a3
MD5 59838cf39e114d9e0ba34fd02044f656
SHA1 16e8f67dc11991f09623b3e3df1334f58d4804f9
SHA512 39f29ad257edaf098a77ab580d31bcf4e3803354a636acabea29a41e7a16f69324f5776c130e453ab30177ddb6a6ddeddc53ef66b6653f7e6774878169674f8c
TLSH
T187F096783BC1C914C8ED3706219CBD001C8A2CF01B0F41E44FFE647039E634A800B6C0
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation9216454041323545757tmp

Path /data/data/com.rk55.com2/files/PersistedInstallation9216454041323545757tmp
Size 90B
SHA256 6c4a8463a6d307816bdf622a333446c7a51bf6ab41b3d0858a2c8fa62aab6a79
MD5 3e0ac25cda20aae904ccfe3906d70f63
SHA1 553d234b7725b5b4019038dd788d668c97cdc419
SHA512 4f7e638e33068f86b974f1aa7f3350b140fbba53cbbfa9b37c0cca2910b0704fc1ea6e2abbea5bb2f8d44698e5d2c2cfaedb3af0a11972996196604df676d974
TLSH
T1A1B0120097B1828188DDA3461E4EF1803D511841144DCF980E29A49004A21D18103DE4
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads