5b99b789b980e5208d12ddc3f31ae910147b60cd6424df963b93e87790b61f6a

Analysis

max time kernel
93s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
27/07/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Maestro.apk
Size 3.1MB
Sample260727-w2awsay1ew
SHA256 5b99b789b980e5208d12ddc3f31ae910147b60cd6424df963b93e87790b61f6a
MD5 ea47a83e55ccb27a6239172ba4c04c07
SHA1 acb601588f791ce29241b9794e35429c9e8d0d37
SHA512 af03e9c3f5f24b74ed0ae3bffe32c603d14e830d1be53b5c4de9067d07db59374a162fbae6006af15e9d587ebc131a609c7f282855a73d3485ffe0333f2c8a62
SSDEEP 98304:YhrGYUR01Jq1z3GDWr1P64WTK+ET5kgE4fYmw+:MatmsWSJP6jGFk/U
TLSH
T164E51282E7E21E2ECC7744364FAB533117169D178683D70B8A98322C6D3B6C88F59BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.maestro.mobile

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.maestro.mobile

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.maestro.mobile

app.maestro.mobile
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4958

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/app.maestro.mobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 756de5d7aaaf4f814403b3ab27739f7c6ae4bb4def9e4d11323df753de7de32c
MD5 91a1df67927b5bc45ebed76dd5fd48a3
SHA1 cadbe4091398f60de6927790dfe320e40c60c673
SHA512 655c841fe4e2af3ef9d3b02f83c38990683c5e180ddec95e3d90e454f024f913fc0bfddca8ccd7806890c28ee39ee22f1092ba82d02c1656bee9bea5a012be2f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.maestro.mobile/primary.prof
Size 2KB
SHA256 dac26accaf2e08445d9a0bc51911518b1f9695b275b27a9f936126a6555b7fec
MD5 b56c8077b844280f93d52313b703b0ca
SHA1 9b3506c6cb68b5050c105847d5b2195098796a8e
SHA512 e098ff19b650cf932662e58b386427642d352681822579ee2a66894fc67c7269c26f79ccf7164ce9b24c08fafeae0b5858238e7ca75e00ca696ab591550514c3
TLSH
T177413C81CFB51F56207FD40CBB7227CF729B4A87DC602062DD46869F97716E385681C6
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads