fc62c4202656b2e0a336175a779ef148de82fd1c96a71aab8a7356de35f365de | Triage™

Analysis

max time kernel
127s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/08/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KoalaSPro.apk
Size 5.4MB
Sample260804-pjzzmaba66
SHA256 fc62c4202656b2e0a336175a779ef148de82fd1c96a71aab8a7356de35f365de
MD5 6ea19fe1002cfaf3000979aa4d58cb4a
SHA1 b8d2cb9df0284a8e16c3da0cc6217c3fb87606a9
SHA512 6b14779e0a0c9860a0491fda76d0ae49469115a0ff98dc703e4d750a1e2db61cdb3ad821d3c1f9eebbd7f3fd35de02e5dcb45f9860aea20efda451517d9690b5
SSDEEP 98304:tnBmG6VWgowIcl80EIyOajHmSnjVAxunqw8k3zfejPejk6CeFeinj9dO3:t1BgowR60ElPjRVAVtj2jjwin7e
TLSH
T197462381F3D9AD2FCC7398328F7A063901469E57CA96C7479968B21C6CBBAC04F45BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	id.stouch.koalaspro

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	id.stouch.koalaspro

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	id.stouch.koalaspro

id.stouch.koalaspro
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4730

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads