d399eb4d2965b9af05b996fc97e7ba5daa07ffcd295096c69c87f8a8dbf578d0

Analysis

max time kernel
33s
max time network
156s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/08/2026, 18:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
apk-editor-1-9-0 (1).apk
Size 6.7MB
Sample260803-w5bbqahn2x
SHA256 d399eb4d2965b9af05b996fc97e7ba5daa07ffcd295096c69c87f8a8dbf578d0
MD5 d917a0b3e51943638330f469e49cb451
SHA1 180a600fb888f89235beca39d28061b25c909d92
SHA512 95c41a9b3964f987d1cd76d3ae50e02412218fa0c3b5e4df6e9620e23920d9c2d28e17f97f82218d68882c90664a60f833f8e917692f32178b826b1e69bf2d57
SSDEEP 98304:fplSM+AaaY0xpsh/GDbWXKcS2RlXkLauu8bh9x+9AJguNghRyCWphd4Fe+X4avtb:gES/GDitWcGJ8RyC4X4FPIavtFVn
TLSH
T14F661252FBCADC17C873813387E60A3675A94C6D5B47D6171698B31C28FBAD04B89BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.gmail.heagoo.apkeditor

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gmail.heagoo.apkeditor

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.gmail.heagoo.apkeditor

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gmail.heagoo.apkeditor

com.gmail.heagoo.apkeditor
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks memory information
PID:4849

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

http_auth.db

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db
Size 20KB
SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
MD5 ed710a8968441282a5939621c2771927
SHA1 b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA512 547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364
SSDEEP 12:TLmCwR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPbAVOw:TLDwRV6/MmXNZ6V2GSE
TLSH
T19992ABC3A7A45712C0186272C8D083809EF5DA6F462AF78318B410507C435C8A8B0CD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 512B
SHA256 23361f0652d2e607c7b56cc30020ed516df2284701f247000f84f77c806e5d9b
MD5 07a49ac622c7a57101191eae0db22eab
SHA1 eec4e5d5961d602b8684e5c4c147ff23f277818a
SHA512 6567a36fb9ac15388ee499bebf9b060457547b9d11ebe51edf83e60112bd93d63e42b1067b1fe7b4030522a37d07ac556ed58d4c79ee4de7678eb9d3699df856
MD5 SHA1 SHA512

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 8KB
SHA256 961270de81662cccafc961a934fc44a24763ca60ea5d9e1f76ff89136356b93c
MD5 4302d8fdfca5394c2ca035d9e04d2337
SHA1 1acbe444ad69768e0eafe0bb1eaff9f017ebf72b
SHA512 74b7f1473500b80fa27538acb26ef1060bdad5d94e76fcf57b9568c77d888b8b0a0ff68cb1d3e49a4783c2c75d05b3934441fb068f2402989ea26d4d743a0cb7
SSDEEP 6:7+/l9xn1dgg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKz:7+t0qLiuWdYRmBEyPbU
TLSH
T161022288B3802C13C83956B790E483440D00A72CE161CB1B66A008943C074CCA4B0DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 8KB
SHA256 94dc4d3a67ea183a7554f14b59642a2a248b58d522de4047c0f11566431986b5
MD5 be16f157a739605ff4009644e691ebf8
SHA1 bab53745002227727ea6481e007956ba782f0713
SHA512 5d774dc76deb2a477d239a448dfcabacf70938e429edac8d6a96eed2aa30db01f1ed14d4fc7de270311031e737f54cee8e8584688cb94aacccf44d7c3e1034e3
SSDEEP 6:7+/l9ofOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKxa/gf:7+tVqLJdeWRmBEyPbDgf
TLSH
T12102C0A963420C03C02F27F7A0C8C3401E20A72C9333CB57169209543C076CCF890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amazon_ads_close.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_close.png
Size 332B
SHA256 c7b6f17b4b37740904bc797c843e563c58f4754210230c7972adce89492ada14
MD5 7a3d8f93175c6f643f8304a715519ef3
SHA1 b02973923879cc0d85e721d4e5f30e5b870bf7eb
SHA512 c84d8520563cee36e8c94e1917244c3041aa007bb25b58c82e75a3c9fb3086ac33f530c54d8dfe84b4780e58a98a75f6e2c19990f24868ff9943e1ff48afde27
TLSH
T154E026B2D9400C2AC4A2E61B889B4020B526591CB9EAEFCB400725E779E0019E90520B
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_close_normal.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_close_normal.png
Size 3KB
SHA256 31df58221ceb3ce3e31c2786ea1f238529960fcc7a5b4f6a111303f22b371fdf
MD5 4da499549eeaa5e59c7ae343abe0a1bf
SHA1 ee798a6265bacb06729f73497a2fdd1b58103a7c
SHA512 b79220c33c766554d2e6d46eaea7ad83a65120bcf7df3eee9a948e5be12bede3ca5957cc02cad5f1d4bc3998ff4b3e7aec59eae7f3e5b0afed2b6ba368170981
TLSH
T183612C59F991C823CEC870C630E3623FC6328F81CAE5EE669C45B80706E90B4545D7DB
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_close_normal.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_close_normal.png
Size 4KB
SHA256 e5b7c7cc5683b2d0cc414e4f9806608d4855962b715c11bb56732246a341d938
MD5 c172b6ac27d6fc771b14db8d8a6f5cd2
SHA1 94c51c0a67862d23612488e036f0d59d9ab4e615
SHA512 5ab49e2b2b085e8dc051eeb5238cc11ab300911bf235c9740cf11e7696291070af2b5ae97b99a86b77867bbe5e1d2280dc062d542a8c8bfb25cf8c6bc15a6f63
SSDEEP 96:DzxBIZJOI0GD4OTyqS6FnhoKWtaU1pIuiSR5bbPkkqKgqCQR0j+l:vf80GDnyqS8nO9UUcuiSzbrSj+l
TLSH
T13AA18E93C451981EEB2DEF4B204C9467E09342B7E99628D264BB18242F62C500CBBF97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amazon_ads_close_pressed.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_close_pressed.png
Size 3KB
SHA256 818e1624e9e2e9dc4de286e98f7aa3754c2ed59c5c737d046fbde9b851ecfcf7
MD5 cb777df652f8c26319d2e30fc7674785
SHA1 15df795840ffe17ddbf191cd08a0c4fed107ac89
SHA512 c2ea5b75d05cead41a25df4c4032ded815942eaa56d2571e53c0e7cfa8a92dc1ed30189aa186869c20270b55518957b0cb557e61e8bc5c148515006704fcc17d
TLSH
T1D3514BEEE4747D09D901A884BCD2201EDE6A4908AED6DB14964F8E8358220EE5C9D7CE
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_close_pressed.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_close_pressed.png
Size 4KB
SHA256 20afbf5ce2fd823a14030dd975aa1cfffa5173e28c3d0db2603bc8b295538d73
MD5 2af91ab6fd8ef6abcae4869bfc783eaa
SHA1 3d8ff36c6e17a05d3317c76192facb8ad558c4da
SHA512 7c7477b03918f2fff69315f851813a03fda51043b25b08c3f83a56a2fefe92e36e8fab03ce007e040ff46beeec43eb2edb3aec0d50ce94dd804347c02fd1b5d5
SSDEEP 96:DzxBIZJOI0GD4OTyqS6FnhoKWtaU1pIuiSvj0I1pnnwB7TdX7hGb74Pxhix9FkBT:vf80GDnyqS8nO9UUcuiSQ2pnnwrX7Ib4
TLSH
T1C3B18DDEC1AA210BE356C957211D71A9A0D3E2A7EC0882F12E6731111EDA0541F79FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amazon_ads_leftarrow.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_leftarrow.png
Size 222B
SHA256 f215ae486c66e87871a417391e3aa6a56e6006ff2ab2a44e204cbec68f385d51
MD5 224de776e916d342500eb2488a128f94
SHA1 ed822cbf1115cac063bcfc8217e312f7029daa6a
SHA512 f3bf846ceaea79598a5c0cec61502e63472e6c74a79850963d689a6fcb3070a1c42d7c5f9e60cbc71c830209c1befcdc11503214005b9cf1bf9d5057bac5a748
TLSH
T142D023B7CE507D74FD7D1116862010D57D45D03F3170DD068357D8136412404A0DF14B
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_open_external_browser.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_open_external_browser.png
Size 2KB
SHA256 0679785e50271789089f075f9ee80334f8041a61664b69dc01d19ba078763bc2
MD5 8f7aef3b9d9263bd1373cb3e44d88dcd
SHA1 968c76cf2b76085631ab3745eb745f89292f0bff
SHA512 a161b013d6b41a790b516ff25432e07e9821f4f68fa0142e4119b6e81bbf3635b05ae2724043021cbf3276e19ba742675893f38331b4db6c04bde29d9ae91598
TLSH
T11C515CCE12A3752CF262641EF0C26234E5B25573078353B70BAD7A4DC96C4750AE3D2B
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_refresh.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_refresh.png
Size 707B
SHA256 36dc32bfa02d90533c6ca4de69a448c63e51166df670e1f2a2782ae0a582c612
MD5 2f2fd6b8e6532e670ce67fade77a5536
SHA1 ac7e004668819b9228bc5d4f4451f3e11ed0beea
SHA512 7046da2bd088acf8ab2cf8e7606af842e23d9645df05f38852ce895f3fc35b00ab90e1c61e03db3a0f5d4f5af5a979bc201b8cc3e0b535a321f918539775e500
TLSH
T13A01882792DB863EE570092390150034D11716993214FF867B07F7B6C3D13D7125C64F
MD5 SHA1 SHA512 TLSH

Submit Download

amazon_ads_rightarrow.png

Path /data/user/0/com.gmail.heagoo.apkeditor/files/amazon_ads_rightarrow.png
Size 223B
SHA256 06795a258ceba3b343635860cac86c612ec3da610f3ff7b65184b84e66bdd733
MD5 1467e5561efce06467784eef669d4bd5
SHA1 08a5a85bd94cb10d43dc8ede73a2de80a5e1305c
SHA512 1b11274c9806c70048cfaa203c4b463ec535a2908953f1c55797f0addc92697964e6671fd55dba4b01f520909e7540be152a60974f869639a4db89235e918114
TLSH
T17DD0239787801C95D63C292011141597FDD6450C3450FC241347D22DE9C335251E3157
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads