1d7da4e8c9d53178db46372c91042a2fe560b8ac3bfb1f7059c42669c81d8de5

Analysis

max time kernel
49s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ShenRen-JK.apk
Size 17.3MB
Sample260802-gzdsbsec54
SHA256 1d7da4e8c9d53178db46372c91042a2fe560b8ac3bfb1f7059c42669c81d8de5
MD5 66c391c84b4857d03705cbf3bb22a98a
SHA1 b11b2fb1c3abc858c3018eee2033460c9b1371e8
SHA512 d609f578da7a3578904c5b435578c6294e747693d862dd9e798fb7336232db4f314d7f3469559865cbdeddf90ec720131a7e374f550e37119b66ba54b1b8c607
SSDEEP 393216:znOGT8ypgtWc8CQnNcN7rOhHu1zC/uj4Wwgz7Mk2hedtdA/+N7:ttp0P4NcNnOBu1IiiFhedtdA/+N7
TLSH
T15107332192BB2880F44E0A7558EB6014CA2135C55CEAFFDB7D0E67816F0F6715F86FA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.shenren.daluandou

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.shenren.daluandou

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.shenren.daluandou

com.shenren.daluandou
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4720

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

crash.txt (deleted)

Path /storage/emulated/0/Android/data/com.shenren.daluandou/files/crash.txt (deleted)
Size 55B
SHA256 600ba44374624542a93165b281ee5a1f4e98da94d82e62a6b5e8daeb7fcefc7d
MD5 a6f3123de659d648f8f3590eef8bba0a
SHA1 f65df66933e948e6210df3640aaf8ecbf6e95fd0
SHA512 cc744fe34f09244e4d9ae7847cf176df3e1384069f3df4988a75c7e454bcd64632583af4cd013d74ab16e866450474a7ca93adc5777fa768efa77b29d9dda679
TLSH
T1A0900217155C30E00D1711568D219A11834AA418054C41019344999632E44321642C48
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads