b1afcc92ac0a63d82f0d291e4aa192e26e8275127eb21cffabe961b06421fb94

Analysis

max time kernel
147s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/08/2026, 14:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sneket-in.apk
Size 6.5MB
Sample260804-rkbpjayybx
SHA256 b1afcc92ac0a63d82f0d291e4aa192e26e8275127eb21cffabe961b06421fb94
MD5 8a3823c58932dadaca17a66f5bfffda9
SHA1 7981803946563ff7925c5f3040e2a6abd95f69c7
SHA512 a63d4438cc0d4b4130944e0ea620692edb613c06219703c263d2f4bb48f09de80e7025a7cb8cf02c870368a2e453476b379bacd320088c8dbb106ec9f6a83c21
SSDEEP 49152:5ojms4Y3Tso7rWp7aGA1sagmMqzAg088p1fp24T24QUKGQnJNCoR++UXf5p7XUnh:5ojmPY3TSp7hmMqL4tQUKPsv5prouc
TLSH
T127669E03F7471E32D5AE43311DBF0715AF31379ABB978B831554A4B87C932E486E92A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.sneket.shell

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sneket.shell

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.sneket.shell

com.sneket.shell
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4792

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.sneket.shell/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 963fda4e71a0d445732118800f9a1158c2da7038194ffd0441c73fe5380b3fe1
MD5 e589e4f3ccfd5485c990a1fa125d8639
SHA1 775cb02dba41260d29484eb126d8236d4cf2c3b2
SHA512 356f5a1211d3474cdec00a341b6a1443f9a23e7e2cf272fefbf255ced5860d1609a291c214e8d43b9d49234152204a24584b2189f55d7aab3a9ace16fed7c0b2
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.sneket.shell/primary.prof
Size 2KB
SHA256 720748696ae9ab4212a0a7ad0f48bb70317267e831114357b97ce56c2d099772
MD5 cee50799ed91a694976658624d6096a0
SHA1 6f9e6b3549492445a3c2978860edb0cb44f09518
SHA512 43ab45fa18ca30069a28b294088db0800bea8cf3b61b2bf15417142b3ce5aa07a04695a3c18868b1a0287b10a1131b086da56fa90bd145ebb64f05dd48a7827a
TLSH
T11B415BCF141047CEB98A91783F7552DE8015D81CCE31D6BDA41582AA22EB8FF49A0A6F
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.sneket.shell/primary.prof
Size 3KB
SHA256 18c8642c2233029acf5f9df0ae429437c9ebd3be74e1df49c124af0ece3c816d
MD5 8543f41591e93a6ec89e43753892831a
SHA1 e876928cfd17aa82b416109042659882b2801b9b
SHA512 4007e789ba72a883e01ab4a9d934621c46b2ffae06039aecb5512bca9c132344d5318e455c75cc9179c7c1692ebb653bdc728b13f7c85c12f24c36c996c3df59
TLSH
T11B716CB4E62628DDD71D619824D756CAD631C012CE1353CDB393BBD0EC0CE96094EB97
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads