5692c711f751bb28d5035005d5d76278c4c131bbbbd07e2dbecc645facb46435 | Triage™

Analysis

max time kernel
86s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/08/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ashare.apk
Size 3.6MB
Sample260802-pl81baaa58
SHA256 5692c711f751bb28d5035005d5d76278c4c131bbbbd07e2dbecc645facb46435
MD5 9bc6c0dd367f8870df9b76213fb5100c
SHA1 941f0f29fddfc0df816af57835e7a6a9e3379a49
SHA512 c2d93d0dfa55e1cf30f3aed637f6dda467205ccd0ddf9dd7218e96b180e3310b7b72d97616e09da5d87cf956f090bac324928acd63664fba460b65ff4044e4be
SSDEEP 98304:jGfX2wHgK1rNTPBEyhfkvB4/IcG+Sp4q5Vej:OF3d/jfEj+8U
TLSH
T1AC061242E3E5AD2FCC7381325BEB577A15919E42C692D3138A24B22C6DBBAC44F54FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	cn.runmoney.ashare

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.runmoney.ashare

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	cn.runmoney.ashare

cn.runmoney.ashare
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4762

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads