fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f

Analysis

max time kernel
107s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/08/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
App_TemanWD.apk
Size 6.8MB
Sample260805-fty1msdh58
SHA256 fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f
MD5 13126821046bf007360d787e5f7e1597
SHA1 f1eaf7abe90ec0bb98dfb7f3392790c1341eef3c
SHA512 c881102eb74f298dd5ddfe6f16c837d5e554e4703fd32ff47b987aec18aa5500dfed1b31d6c1cba30289526d7b93986558096564a170cf989787a92336704ea3
SSDEEP 196608:1EH3YxmWaGWH+ejrRS7K1oD3WfIxuewot:123YxmvGWH+QF1oD3WfNot
TLSH
T15676128AFF5CBD2FC47F40320B6A923236564D15CA8297476944376CB8776E80F99BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4689	com.temanwd
/system_ext/framework/androidx.window.sidecar.jar	4689	com.temanwd

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.temanwd

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temanwd

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temanwd

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.temanwd

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.temanwd

com.temanwd
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4689

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events
Size 56KB
SHA256 03079803fb816b96d1e832a7f21184035a35b6d3a03a2310bbf3cb7a6129779e
MD5 52acb272a8b1a9567cdba99e5757786a
SHA1 73d622ff49b5b3005ef255e0ab47a69c6ea645d4
SHA512 1442939dee720b98b338d6de349ada45512798c81b5c19ace28274f117226250d6ed773cf8ee13143f6b7de535a99f6361ed21f36ba6ccdeb586f0b1b2649d79
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSs:rAMEX0wIyNjas
TLSH
T14343639D1B2C2221C57E283ED3E143635B7C93EF572392623E948DF98DC246974354A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 5361b8d95d4a883d26f6a4b1dfa56a1d43cd279230934db15b25b1dad1e85dfa
MD5 c641a8e3563c062c7b8808c655121c17
SHA1 f663b77cf1966bb3692c2f7ab921caba4a2b3158
SHA512 b9a90a1ba1bad758e159cf0e84634871904f1ea3886fe0db787d194bf80ffec840c678c1b073e75269504d1b499644fa796642a320973f47c07e5dd6c0c04024
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0559df2477b1474041e98a9313572493bb48f67ef10eee8394a24142deb51ef1
MD5 b097ed0fb31d5d2a59eba38f10d65ca3
SHA1 1da1e2060da1807b456144e9de90d45a5600a846
SHA512 0d36b3728a01ecda5b7f93fe669538034f1e448d643fca7ccaafdd2210e101f536c62be066a93965a1318e5a3878b962c1876e988f8409171b97dc3c933b8425
SSDEEP 6:7+/l9sUlGn1k8pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKrS:7+tLHsqLiuWdYRmBEyPbx
TLSH
T13C02C08C77C02A23C83D177790D583420D00E7288373CB171E9108987D0B5CCE4A1F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 a249821affac792d05bbb2340eb24a87805d90941537964bc0565a5944f951cb
MD5 4ff5e249ef7a36942b3b88ea7f482e5f
SHA1 ccf7c1e08830963d4e186caeaa60bb6ad0576fab
SHA512 78edb67990fdf0e3591d7171f1390b72850ef15104503cc29e58e7dc5b2fe6de90d7e230cc2abc727abb8f2775425a70d4df17cd725812116164eb4524edc5fd
SSDEEP 6:7+/l9BkclGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8y//K0n:7+tYfqLJdeWRmBEyPbjyXF
TLSH
T18402228863C40803C02A1777E0C893802F18A728D323CB0726920855BC466CCE891D40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 a9f49c5263359e7dd3eb6b126248dbd5ef25841e4128c870e0f3b380d7142963
MD5 419a883c557c97536a4b50da4b3f2da2
SHA1 5fd67e6b954c68e41fb78ce745d0b48a90b40555
SHA512 37a244ff130e268e500e05f0e8ac8fe156a9d7099f62f1a2cf305cef325561a4e7c7c83a3957859953c1b1fc0778da2a29444f78311b54a047c457b4cbcc427e
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6g:TLiEq9zmzrfRmBEyPbP/P+/0Fl6U7
TLSH
T1787268CD7B105703D1734776B0CB93E21C34A2588333DA073B450434AC43189A052F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 f65c9853592c776a12f9328563a34b5ef1aa5578c55e5ab10e05ac7f3ae1d956
MD5 2a9f0622a8addda8b9f643692d40e6d1
SHA1 c9d0cc71a1edc9a43478bc4c094aa63c9bcd445c
SHA512 84f54002d228d2eeaad259240be8ff3e1c33a529b610f2291a050b157c5f83d790bd7fb0f595873313b6c5fc19363fcff4009d13c0f9a63e6a2a772cc10497aa
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlWv+/0Fl6U7:TLopmzr0GSP/h1499FilFl
TLSH
T19372E9D97B249703E2774B75B0CBE3D22C3872A59763E5173E461A2C6D83386D062F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 b8de6f0a89d2ef728b9fa3456faca780122be719c3a3cd0c13a7791d2a127fb3
MD5 ab8359d0178f9127fa1601629238e438
SHA1 7d93e0ef2bbc8bf49879c0881f11525c720be24c
SHA512 4209846f5874999d1c7b8a2606f3bdb1c41677cd6574830aa8fd7853963baeebdf93cb7d60148c69921718d8fc64730d5b76923c5d6a3bc3dba6d7dcb0d0030c
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/wolhOLauAUZw2qc7UyWlsrJh49blqYFlWv+/0Fl6U7:TLYpmzr0GSP/wovKaufE+Nh499FilFl
TLSH
T10E72F7897A64C706F2734F3560DBD7D1283871A64767E61779061B2D6D42396C171F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 5a5f26d346bb02a5147247ef24e3a234f0e21c1a2aaf5b7a1ced8babade8c50d
MD5 0576caf8a88acb9c41fc1e239a044e60
SHA1 6131f7adba96979092cba32d85b6327224573b31
SHA512 ada4b1cee0835fce1e82146500736d3a432a278ba169bc3ebd40ae440e9ee101cc697cb551889750f84f4844a5e6c37dbec45ec8d47d2bc35f0394442b21c732
SSDEEP 24:TL6vpmzr0GSP/o6ovKaufE+Nh499FilFV:T2vArSP/onyaufEj5yV
TLSH
T18772F7C9BA74D702F2734F39A0D6D7C2293931A64767E61779061B2C6D42396C131F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 e893640c030f0248c149fdca69a7d4493b330554665089318ac55083a69cb0af
MD5 1cada205be6880ae10d3d03ee3105b8f
SHA1 9cb3e1ce9bad4318ba41036f85a5ad156516bd2d
SHA512 c30ba2a3189c5817fdd859919548e9fadb8560f4b3186f7ce0602bc1596b8256acc1e3635eee3348271fb33d6b34cfd6e507684d6267e07c81a1d6fdd58bb9fc
SSDEEP 6:l9bNFlkls16/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WMWj:TL6E6v9zmzrfRmBEyPbP/WMq
TLSH
T1B5722B8D9F103603CA770773F4CEA3925D24622D8737AE572FA54870AE43649E091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
TLSH
T16D72C2CEDF102606C6760737F8CAE3A05DA4A22D833ADA476B950460AE42549A8A1F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download