4298ae59669050779de2c910c25410375b661e2ba1d845d81d2eae186db13c1b | Triage™

Analysis

max time kernel
102s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/08/2026, 04:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
etc-plus.apk
Size 5.1MB
Sample260807-ephmesfp4w
SHA256 4298ae59669050779de2c910c25410375b661e2ba1d845d81d2eae186db13c1b
MD5 a15c46e665514eea471747f7d8b8fcab
SHA1 77d15ffd1d4fac56889b56de2fe92c2134315200
SHA512 21915c78afe71eee6756519f25b0fd7309bcb39c436ce4d1f7ee8c639e2974af68f9644a885cb76381af6ceb05ef674f99b2a322c25c0a3c0898dbdaedfa09ae
SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCb4IpNosqg6W5BAmXF:eZjJk75T15b6tUk6z8RdCbV9qgZBAa
TLSH
T13F36EFC2AEDC782ACB368137CBA6F6FE42B3DD5E95419213A534F158187758C0E31AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.yooting.etcplus

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.yooting.etcplus

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.yooting.etcplus

com.yooting.etcplus
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4475

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads