640b074c2bc8c47930daaf3a20b9105b46523f0917373894ae6d7a6fe55426ce

Resubmissions

28/07/2026, 17:50

260728-wevbxaaf687

28/07/2026, 17:10

260728-vpsqdsad937

Analysis

max time kernel
148s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
28/07/2026, 17:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Gl_Chrm.apk
Size 18.8MB
Sample260728-wevbxaaf68
SHA256 640b074c2bc8c47930daaf3a20b9105b46523f0917373894ae6d7a6fe55426ce
MD5 f3bc51b8f56d90d2a0d163b9cf1b5e2f
SHA1 32a47f85fe9c5b9eed80e7a82d8387cc1168d8c5
SHA512 2112d64677293b47405d213797d8d75d7fa27882a733fa3cd61bf9b34d2dadf7f01cf58897d60f1582c1ea92e2e94c5c4a6bdb2be581b77f02b6818ff54354ea
SSDEEP 393216:/RavXZ6xIWh3sDNoTfnN53JyzHhXRCQ32WI8VN2WnkUT2V3csj/OH:YvXZ6eyN5KB882W/N2WkFNl2
TLSH
T1B41733927788987BC17D463A08738B6096433C59DAE2A71B3601371C6C772CD1FAEDAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.eqzupczpu.pufvysmbn/app_dex/classes.dex	4777	com.eqzupczpu.pufvysmbn
/data/user/0/com.eqzupczpu.pufvysmbn/app_dex/classes.dex	4777	com.eqzupczpu.pufvysmbn

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.eqzupczpu.pufvysmbn

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.eqzupczpu.pufvysmbn

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.eqzupczpu.pufvysmbn

com.eqzupczpu.pufvysmbn
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4777

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.eqzupczpu.pufvysmbn/app_dex/classes.dex
Size 2.0MB
SHA256 bb1f360ddc89369bee28b74781aa6883c2c72d0a122be87ce76920b890d0d1bd
MD5 fd8e1914010a9ecbcc0da0e1f6c0cba8
SHA1 8e57e36d7372345c4c75d5e366064c09d5fa6ec9
SHA512 4dc617e58c0f2aa6b412c559ce810dd126ab1a6393fc59eaff13ff8566653b0accfc33663263436f608d8456233c4fd06c59a8d4e0eeb6b4ddce90a124eb669c
SSDEEP 24576:Oz0m/q9UHFWCIvpERLg5U7POaO5bi4MVV12AogDtBsmpkpiJCD:OTFDHLgWPWsVPfpk
TLSH
T160A55C47E9019F6AE5BC933EA8E6432173356580BB838B0B2149E1F0BD472C67F956CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.dex

Path /data/data/com.eqzupczpu.pufvysmbn/cache/classes.dex
Size 1007KB
SHA256 e4c693d5758ad271c7b3fbee675131babbb3b2fb3eb6c259fb93bd67d073b612
MD5 7bde0d748d5014ed9419d4f4d8db42ac
SHA1 4fca36bd519ec96e28dfd672bd3b80e675f5b8e9
SHA512 7eeb654de2e20b68b5ad1188b9b5a9e15874899f0206fa592675c6769016d9de0f812fd1b331a947902a7acb2fe425c8443b2ccaa020b728a6da335108737405
SSDEEP 24576:s39M/w1NAEgjgBV7xaF4P0g9hNDh3/sWqd/IDx0:wyw1JgjO7akHNDx0WMQDx0
TLSH
T15D253303A9C0A5FEEB94D75981659F9495EF2815DCBB0AD4BDC0080C98EDFFC8245AEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.zip

Path /data/data/com.eqzupczpu.pufvysmbn/cache/classes.zip
Size 1007KB
SHA256 41e34cb2cdd3b3a129aa4d4a45e724aa2835ba22dad49af16ca780510669cbb3
MD5 4601a82a6da0fb82cee362cf6c9bf360
SHA1 64a6b75b7a0cd30fcc5f520fb740ea324545681a
SHA512 02200a6cec2dd2b04d1dd1a7f057732e50c0d0982b4ede3d2b8c502cc8eec195c0b742039f8ec8b2c8ee91fc3f9f18e9065662bd98ea5a61a6270c157e747d40
SSDEEP 24576:LfLW/s1Nu28jQ1Vt/054tCUHhN/hN/II6dHsNVY:Hcs1v8jYL0WBN/jwIcMNVY
TLSH
T1C2253313A9C0A5FEEB44D75981655F9495EF2825DCBB0AD4BDC0080CA8EDFFC8245AEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads