d399eb4d2965b9af05b996fc97e7ba5daa07ffcd295096c69c87f8a8dbf578d0

Analysis

max time kernel
145s
max time network
155s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/08/2026, 19:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
apk-editor-1-9-0 (1).apk
Size 6.7MB
Sample260803-xplcesec55
SHA256 d399eb4d2965b9af05b996fc97e7ba5daa07ffcd295096c69c87f8a8dbf578d0
MD5 d917a0b3e51943638330f469e49cb451
SHA1 180a600fb888f89235beca39d28061b25c909d92
SHA512 95c41a9b3964f987d1cd76d3ae50e02412218fa0c3b5e4df6e9620e23920d9c2d28e17f97f82218d68882c90664a60f833f8e917692f32178b826b1e69bf2d57
SSDEEP 98304:fplSM+AaaY0xpsh/GDbWXKcS2RlXkLauu8bh9x+9AJguNghRyCWphd4Fe+X4avtb:gES/GDitWcGJ8RyC4X4FPIavtFVn
TLSH
T14F661252FBCADC17C873813387E60A3675A94C6D5B47D6171698B31C28FBAD04B89BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.gmail.heagoo.apkeditor

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gmail.heagoo.apkeditor

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.gmail.heagoo.apkeditor

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gmail.heagoo.apkeditor

com.gmail.heagoo.apkeditor
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4785

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.im_6.2.4.db

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db
Size 36KB
SHA256 39f3d0f8c4787cc98dd6ef74678772191aca4dad00a38309436c5ef6c5497966
MD5 0c75e8f4456eee22f87bec5d31c00f82
SHA1 ae56767e5407db56658b4e9c89d03d09a8da0ad4
SHA512 5ab816fae8d48a52883dc577cd385a5542e2a419124406dc1b5814abee38ce940ae7be29a980bfeaa75f121c7953fdd073f0fe33ee7edf3773f7ee43f2b2bac1
SSDEEP 48:T2BWLHg6Q7d1F/prW3dWxW3Dd+1Ak7eOPI0VAo7DS:iEQ7d19pi3dWU3Dd+jeAm
TLSH
T1A3F288CF4F103320C9F95176DDE022E34E7C5E1E9B524BE5AB6404FAFC82170A4619BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 512B
SHA256 def427fc77504cd2460d919a354564027e58f2ab5e92e4ab84259ffc3be6ba4b
MD5 2ba9c793ff0e827b49f45562581c0614
SHA1 67dad418d2241905cee0c5cc0e831fd9f05165f1
SHA512 58b4376d43784bc49e1c2fe1450bb9d7951d3dfb18d83a6e6cdedde37d726bd0a2bdf40fbfdcd060c3803cb2f98c1fe2273c3fa5400cc85ce5adac6ed8cde016
MD5 SHA1 SHA512

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 8KB
SHA256 19b1a5d1ef0fdcb144f1fbbe6b4adb1fe24095281a674c6d97ea8cc7a9943d1c
MD5 1ba823418973f5942e6f7186a07f8677
SHA1 f2aa4d0f85a48c626327621e1340f3fb9945a23a
SHA512 72187b74c640a71bfd4764e99bde8d692b26d760b99bba580a504adc81e07800c774bedec6f4ba6f37ce68f5c9c05e9417435596248ae1ca2805cb30a5e6b2c0
SSDEEP 6:7+/l9Y9Gn1+vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwC:7+topqLiuWdYRmBEyPbg
TLSH
T1C70222A8A3C00812CE391A7790D483600D30E7298B73CB972E9008E43C074CCE8A0E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 4KB
SHA256 8e4c2cf2a1f92ecd78c780acf3c95b90018c0f369d485b7852159a8b6fd9d683
MD5 217a8901d322738d1dd3e113f41d8cbe
SHA1 592759a757024cc3ab83d2f7feda65606f552d3e
SHA512 f30e97c74e35a1fc9cd514cb31b1973ac0a3214cebc637f9562aacdf1a83593e72732ec28a8a4e0dfed1316a85e684f195c176ab54efe6223aaea0d6baf7b78b
SSDEEP 6:7+/lCFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK5:7+toqLJdeWRmBEyPbC
TLSH
T10D91C088B3400803C02A1B77A0C4C3C40D2067289333CF0716D108543D4FECCE490D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 8KB
SHA256 00008ddb839e6a77b772083259307b65b7aef648ef39b815ab4f60df3972c078
MD5 557642ef9dc507e3b7251b24a39d85fe
SHA1 0a3b5add7f897278922a4214d083f1c481b1b2a5
SHA512 b87c7c23c7d8a2471a6036ec2e0bddee6a155629d3427b069530cf3264b441fea6507214798061787838a704042524c9bcc3b0530f2031f5d4a863c7b5ba3f06
SSDEEP 6:7+/l9c9uHPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKS/Snv:7+ticvqLmqKRmBEyPb52
TLSH
T169022298E3C10C03C02B5677A0C883490E01E334B171CB079AA00864BC474CCA8E0E80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 8KB
SHA256 71ada796708382a1fab55fa8ed0dbdb1addb5178a2323eae5d179f4a8562ae22
MD5 2f770aee0ad661fe64481c6f9eb0bf5b
SHA1 3d98b9a2c1927ee5437cd98ed3a3ccadf9c17184
SHA512 369b2ca60eb2275af69911ab0fab68c0f76a932d5b5ea434e69e8af61a022038b048c3266c58b7ee709f69033ee0ef20ef242274b1dde26c5512e41c4b163e58
SSDEEP 12:7+tJnqLyKPiyNTSFbydGkIZav9vIONeIO+E8v6VODfRmBEyPbvMla+:7+t9qLy23LzI0VAo7n0GSS
TLSH
T12B029ECF5F053216C4B98376DDF502D31E799A1EDB4247C326E009E2EC4249874E1DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.im_6.2.4.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/com.im_6.2.4.db-journal
Size 8KB
SHA256 8c1345e58ecd7521aae653a1bcda4fab6fc20f07aeec0a48d47b43a7d12670ba
MD5 72556242baa7ba91d4000a82ef48e7b5
SHA1 d1c1c71e8c5dc0b7eea51f8a0ecc4ddff3514c8f
SHA512 c0c72f0c08783644a8e6db06faea114219cacd9a16b6226481653b44a86920a7d382a904dca4aba085e89602eac4281d0022fd87dd0d4944a1ab67d16d90b8fe
SSDEEP 48:7M9qMWLHg6Q7d1F/prW3dWxW3Dd+1Ak7eOPI0VAo7DSU:7EIQ7d19pi3dWU3Dd+jeAmU
TLSH
T1BB0254CF4F153310C5F5517ADED021E34D7C1E1E97524BE4AB6408FAEC46570A1A19FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db
Size 20KB
SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
MD5 ed710a8968441282a5939621c2771927
SHA1 b6ac28b3e32ea66790c52d6934608b5e71f3d5b8
SHA512 547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364
SSDEEP 12:TLmCwR6YDRAXk3GMmJVMeNZ/tgVNRmBEyPbAVOw:TLDwRV6/MmXNZ6V2GSE
TLSH
T19992ABC3A7A45712C0186272C8D083809EF5DA6F462AF78318B410507C435C8A8B0CD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 8KB
SHA256 6c2653d5410a492202e6991aaf19c2fbbca7bb609cdb2951bc507fae3014476f
MD5 e70d6b7f18032465b4e798c504d5e4a1
SHA1 0f5122134206fa53bbca61dee4e61297e63b02ac
SHA512 82e78d4cd0f143a82fe548e9d6a1423ebca23648021d765afd49d2919506cf78f24bc1efcce8687d0f46dff94a34c246a28ee9c93bc6ad60c8e4295063d2c0cd
SSDEEP 6:7+/l9zICn1aRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKo3un:7+tR+RqLiuWdYRmBEyPbEn
TLSH
T12A02C08C63800913C82DBB7B9CE583D00D1CE72881B1CB1717B008A43C074CCE8E0D24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 8KB
SHA256 6420482ff653b1872052618350d1e4390dd2b93a68896657b9605133a59c87b1
MD5 be86f54a1ad99d12e0c41807f43bdbaf
SHA1 68edd391765dd1758a983e96839fbdcd8be5c599
SHA512 83767323f20c1c4f2b59a6ec9f382cfd04a16c8e219ad560a9f97c7c0fd63ca3e97a03787539a13db1b02967c99756900eeb71350301a3e3b7abcebcb3a99bbf
SSDEEP 6:7+/l94Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKB3//SA:7+tmqLJdeWRmBEyPbeF
TLSH
T1B602228863400803C02917BBA0E8834A2E10E729A373CF0716910896AC066CCA890D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

http_auth.db-journal

Path /data/user/0/com.gmail.heagoo.apkeditor/databases/http_auth.db-journal
Size 512B
SHA256 0b454936d271b64f69a794a4953fd3687d470f5869863ba2531cc9531413c7ca
MD5 eb7d62b3e7c7db80183a7dfdb30adbb3
SHA1 2537db594d1d247deda22a23e3497302e72ead7e
SHA512 52d8177d3db6a75d40a6f39d08147e6a213f6f403b0ec66db299a0d5277c88ad412351819708a9855a90c6e0c6b74b2edd7fe9254e7055e03e7ecb420b18fb1e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads