d4de26060971132f44590800aeb6640d92f873b76300283712f0d9cc941372ad

Analysis

max time kernel
17s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
27/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
blockrot-test.apk
Size 3.2MB
Sample260727-phrxmael2v
SHA256 d4de26060971132f44590800aeb6640d92f873b76300283712f0d9cc941372ad
MD5 cb34cfa4a4fbe208dd83ed64db184254
SHA1 4dc0adead5a06e154bed121c9021c277a76f8468
SHA512 e5566605386d979d4e19df27aa7c2aeca7708166b88f96232468a04bc53a6efa2312695a451e7cbeecfd85eab05eb97e8fd1964990db82fe5a1006cfb1e50cf3
SSDEEP 98304:bljHqwfKw1dOJhOGDy3h/5fZTVZxO2tYWR6/a9j/Ku:tvfKmAzO/5fRU+Vhn
TLSH
T128F51282FBE61D2ECC7744320F9B62315712AE03CA97DB078994722C6C7B6D84E55BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.blockrot.game

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.blockrot.game

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.blockrot.game

com.blockrot.game
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4760

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.blockrot.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 6b319f5adedb59ace1883a607ec3e06a02ce0ac26c6b20c7666eb958a6c6b61b
MD5 049588cc6ed1578deeb94fb6aa2e735e
SHA1 5fbed2acf80d208f0d216bf482154a4851cfec4c
SHA512 49c4b2b09fcac210b4e3b6822c6a706ed68187c1879df9e7cbca2ca71d4304d7eea27c9de8fb5351b3580bf18f2ab858c018871444a8567940a3e89c281760de
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.blockrot.game/primary.prof
Size 2KB
SHA256 e0cb35eadbd4e70961d279e0eb4f9cc2678e5be870aa1e390cfe7d83bf556df3
MD5 dd5a6d852b2cb770319507b31db38808
SHA1 3512da203e659a2416e4865b70dfbc2c90dfafd9
SHA512 a88e8b7af300be731932a4472a75acfb7ffd96fe45a29487f832c892f221c79b57f351d8ac6b954d175aa314217ed656f3406519994ef02456677ac41d12eb09
TLSH
T1DC5129ED2843A3A895B0001653B1A29A73A813E33522B4C48A70D4CDCA7BF2D95A5DE5
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads