fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f

Analysis

max time kernel
148s
max time network
155s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
05/08/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
App_TemanWD.apk
Size 6.8MB
Sample260805-fty1msdh58
SHA256 fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f
MD5 13126821046bf007360d787e5f7e1597
SHA1 f1eaf7abe90ec0bb98dfb7f3392790c1341eef3c
SHA512 c881102eb74f298dd5ddfe6f16c837d5e554e4703fd32ff47b987aec18aa5500dfed1b31d6c1cba30289526d7b93986558096564a170cf989787a92336704ea3
SSDEEP 196608:1EH3YxmWaGWH+ejrRS7K1oD3WfIxuewot:123YxmvGWH+QF1oD3WfNot
TLSH
T15676128AFF5CBD2FC47F40320B6A923236564D15CA8297476944376CB8776E80F99BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.temanwd

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temanwd

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temanwd

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.temanwd

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.temanwd

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.temanwd

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.temanwd

com.temanwd
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5057

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events
Size 56KB
SHA256 67d327e26577441eaadc49a7630bbe79bbf079bb2ad39703fd46bb9818e71287
MD5 79695233c44776b4e392b5d54fe62d56
SHA1 be7f4e7726c9178ba687c7fcc399fd2e99d0fa84
SHA512 9a25ddd389fc608e0aeb2202967da7fc97450331d4b11d38cd3834577cdff5e7d488ff368bdc71da4ddae31638c9bbf8701e3f0357b3f77163cb94ca01ba09fd
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSo:8MEX0wIyNjao
TLSH
T14443639D1E2C2221C57E283ED3E143635B7C93DF572392623AA48CF98DC206974359A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 0100966490df7dcf2dc7dc73145bb95e1914ae231f0fcd38e5fd6c942b8836b7
MD5 c93871c234e464ca0d7a00c3d900f4f0
SHA1 cc135b23f32137a127c766d67404d1bf356b6e2a
SHA512 1e2d748f47e92a0e886dd1e83811ce412ea8b9233c606ebad124c10e9d1d3072e502c8d1fdcf2efc913f88b71ace88fb4e85d0d91de4e86a41fe058c37bfef46
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 5055d01cafdb2da240e47babf1abbbb2327a8d0d9329a031d0e08bb65e52b1df
MD5 c0ee71a1ec2af8599b0a151083eed274
SHA1 de64da97387b9d01d07cf7be65471f37e90285c5
SHA512 d5bf2172f4df924decd535c744330b944413163ac434991a2efce28dd4415880b62509ccd34d0e0a43ccdd89aa5e99715f9dbd3b6bc9b6660eba45c631ae71d4
SSDEEP 6:7+/l9sa4n1RJvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKli:7+tIvqLiuWdwRmBEyPb3
TLSH
T1C00222996F800822C81916B7E0D483410D00F729C162CB0B666008D83C038CCA5A2F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 62bcd337e10bee5ba1f086a84c67aa05eba104ffa55e80610088879bd277f8ff
MD5 e25f328db8beb95aa79630813be875ea
SHA1 86b4d6f37823fffba5a74b88d3a1e03a3e2a3c7f
SHA512 682f68ae50f3fd2e103ecfd2a693593d5870e2d91227416c434f296a22c70f3ceb3ff8691e0786e830800e61588f1477a46a13da1b73fa3d1d9a5dd0a86cea75
SSDEEP 6:7+/l9RPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK4x//a:7+tPqLJdTRmBEyPbRa
TLSH
T15E021289AB410923C62957FBD0D983952F50AB1582A3CB5717604898BC86ACCAC91D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 3cfdef6d255892a77b6511b21dce21df223e8394cd4131f8ed14ec0d6648eaf8
MD5 443784b5ed75071d50660e9d93f6f466
SHA1 e5a039dcc0ee2f89e9d5785a4bd01e17f4c394d9
SHA512 13c119ac484997ece69deead4a20c61007e1a74e0ff1bc82bbad21f5473d269c3e3944fe5e1046b3530fb5313bbcbb1a99871235154362ad98eefb8d56faa350
SSDEEP 12:TLiEy9zmzrfRmBEyPbP/P+/0Fl6DlUIn7:TLApmzr0GSP/PlF4WI7
TLSH
T1487268CD7B105703D1734776B0CB93E21C34A2188723DA077B5404A8AC421895092F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 24937ee422aa4ede379e3a72dc90c429ff3fa9c6483a6546b3772596c1151177
MD5 9c1ef1d25af12e5d4bf6b766eac59a0a
SHA1 da5aff8667248e711abefc8a53f426e7690aad03
SHA512 1cf5beea9b0c59ce733eed43b16503a89585948fe7e0454eff7c17c6cf89f40146b2549e859f31d665bc470f7ec3dea425e4b053b28752e3ec0a106da133bfa7
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlcClN+/0Fl6DlUIn7:TLQpmzr0GSP/h1499FdblF4WI7
TLSH
T10C7259CE7B209703E2330B35A0CBE3D22C3872158B23E60739051A6C6D823C64062F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 69ba810719c3b0b0bafe6f91797e19a1e9ce68db7781b98c5395a1843f57733c
MD5 5f1c926f4bf8bb77b5cb6894a65866b2
SHA1 ad9c648fcd60cbb61d20fcdb8551f998b333696e
SHA512 2732e3b9c1df998b1a932dae918bde98f78c2f3254cf9043f416ff3adb230dfff2c88f11b045382501009ba542074890b0ceaef3fbeaf39b93ca54d99bac4f59
SSDEEP 24:TLEvpmzr0GSP/wovKaufERrZ499FdblF4WI7:T4vArSP/dyaufERrG5R30
TLSH
T173727BC9B6A4D707F2734F3960DBE7D1393832628723E30739061B5C6D423868161F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 3d2cac7807369cfcd1949165cda052bb889dd29ad4b0059bd50ccd8292734590
MD5 db525707943effc9ed0e8d471f73e1d3
SHA1 fb19954cf94cc03286cae30fe2c17b039dbfdd34
SHA512 a9bc46f20cd6c7fe28a79dc77d7e87ebe5cd749c144fc8206b17f3249e76d1f45e8983719fbec15ff351cec781247fb0480ae6d0f87d3c6495763ff8160673eb
SSDEEP 24:TL6Xpmzr0GSP/o6ovKaufERrZ499FdblF4WIv:T2XArSP/onyaufERrG5R3s
TLSH
T1D072F7C9BAB4D612F2734F39A0D6E6C2393932668767E71739061B5C6D423868061B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 c76dee1bb46a7dbb123274cdd118a5fe1209b8443ef578cfe9073b0f8bfb62da
MD5 5238f29e3049fed162fa439113c71069
SHA1 31f4c91949db1e77fe03e422e22fef350c43eb68
SHA512 2848bec5e8a3a215933ffea967b0d1be4e328518eade3ee3a3885a2227faf18a072be6747a6c541115a3ff58ae4acd94c60e6783c895ec296a98e31270051651
SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WMWj:TL6EK9zmzrfRmBEyPbP/WMq
TLSH
T15E72C28E9F102602CA670672B4CEA3926D24A2198737AE572AA44864AE42649A091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download