ce0c36194eb90795d1f89a6cccc812463c4bf7bfc4c831e7d49ed65e8a7ad75c

Resubmissions

11/09/2026, 00:16

260911-aksjlszydx10

23/07/2026, 16:24

260723-twdpda1shv10

06/11/2025, 00:33

251106-av97eaxlbr7

04/11/2025, 18:15

251104-wv2qxsej7x6

Analysis

max time kernel
95s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
23/07/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TikTok18.apk
Size 6.8MB
Sample260723-twdpda1shv
SHA256 ce0c36194eb90795d1f89a6cccc812463c4bf7bfc4c831e7d49ed65e8a7ad75c
MD5 366b5c16e764b665896e3c027d391253
SHA1 a88b49401483820baff031ad779da5ebfa1563f0
SHA512 f10cc627f55a1fa1e1686b2c6db0caf660300130967b8e09c50413b1837060db979a499717dfd0211d3029dddb5f06329f33f4e452fa84f36557df45536496ab
SSDEEP 196608:DMnAyOfGEp1laZ9yI3PdC8X/T4qYydv0p3/1:OWNp1EfdJXo53/1
TLSH
T1B7760203F78E492ECDD2FA780D9713616619ACEC291092DB4902F218BEB72D95F25FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.p99a7e7cba.tiktok18

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.p99a7e7cba.tiktok18

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.p99a7e7cba.tiktok18

com.p99a7e7cba.tiktok18
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4769

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.p99a7e7cba.tiktok18/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 0722ae1420469f54f06b3d5c28294e622213003b81b16b08c328e56c901f0bb0
MD5 4d9426ffabf0e88f982a970b557233f7
SHA1 afa3a66990e02f18aff69c5285c5cacb3ddcc783
SHA512 44855eec60e87e3f53d2162ea0519f6d12eb4f29011be69b7f98320900b1a338697f6a9683c326835a6bab7a026c6cb040d128edf3f71269a2932c7d85b3e9b7
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.p99a7e7cba.tiktok18/primary.prof
Size 1KB
SHA256 e3e20aa08adf1adcb6cefd7a0528f2ab224e4b013ab5af0b39a7f5f7f3e20cf6
MD5 7cb51b6eec01991b69f43dc4b7e06614
SHA1 52bc4727f5e27808936c0cee241f27820b65f113
SHA512 3f81d029393f06a482d1cd4c292d5ce91015916d796b2e5c476748633c68414632653f629c2c3cab0ec4998b756464a13efedf4228216048cee5638bb03b4e1e
TLSH
T13521E76217027E0C64D51E08D403278707C4DE7A28B140CFAD1C7AD71F81733D7268E5
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads