f3e1074ca5e82e4d4d9b008d8438300f2228f98b4976a190dc60cc9461677f32

Analysis

max time kernel
149s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/08/2026, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gen1recomp-0.1.1.apk
Size 20.7MB
Sample260807-akyevsxtay
SHA256 f3e1074ca5e82e4d4d9b008d8438300f2228f98b4976a190dc60cc9461677f32
MD5 5ec8b8197c7854cdddc9d7e70cbad118
SHA1 092c2ac5ce0cf9e9e83ad8b60b6f1cdafb0bdeb3
SHA512 4b63fbef9fee082acfdab139650ad240c24e08f232e50917b045c5c0f1bed158a218d7306dc748aab9779d53b001d0135db6563c2144e552ed159b0ec8426ddb
SSDEEP 393216:aFtsH0+HZNpHSZOk6+K3Kd7a3rzg5bgRfrbnW+LI2smvvVPHiXsoLnitApiMTyvR:StQNpyZOk6z3KF5aRffW+U+ftolg
TLSH
T188273385E399EC1FDC73D4328FA94BB242458E82655ACB5398E8721E0C7B6D44F98FD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.theboisclub.pokemonred

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.theboisclub.pokemonred

com.theboisclub.pokemonred
1⤵
- Obtains sensitive information copied to the device clipboard
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4784
- sh -c curl --version
  2⤵
  PID:4844

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Clipboard Data

T1414

Discovery

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

game.love

Path /data/data/com.theboisclub.pokemonred/cache/game.love
Size 2.9MB
SHA256 fdcce0662160f22ae9c99486fe6e1e081c6f267248203479a01dc0d096c33cc6
MD5 53ead6c0be5971f7c571d644cb5ad913
SHA1 38e06ae5d2f6873052c404ae3a7a2bfd0114110b
SHA512 5e73cc8df5e59e7be87247c42c8858a1c9e1fa4a3984daae4f1e4b7ab1bacef08e43f8a750085a939e1d5bb168105f050423f763dc543c4f53ec2a001517ec67
SSDEEP 49152:LvAeDdqm7frPsJ4cKnCZ6yoNbcP/qeQVJSSAt8vQGXw4GByIhabicD1+a3l+cSi:LvAeDQ4UqnCAyoF0qbVJStPyIMbbyi
TLSH
T18BE52339DF0CB353DC1E85F6DD246A8461614A0441C3A77B7F78938ADE9B6E02F7212A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads