931ff56818fd668a441e911a569d789e15254a1d7384b21f295544eaf01b7610

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
09/08/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
trengo.apk
Size 11.3MB
Sample260809-wve7xstarh
SHA256 931ff56818fd668a441e911a569d789e15254a1d7384b21f295544eaf01b7610
MD5 8a63006dba9a606e3a0bad15d9723951
SHA1 018e4ffc05a9b1806483f3408cf6137a86576117
SHA512 ff580cbd75da31e38d236cc1c8659228ddc63acb0b2dd5df3ae676aa0125fc910a4dfe25c34e0222327f862d3cf6c38b3efecb3e146e2015c7e63602029f8256
SSDEEP 196608:GERfij0DzHO8wYpq37VDPCoMuYQRmE0lINRyAoBI9dp/EXWbHa2OmIa2tHdaKHa/:GgQKOJP370OilIrh9CkrWKdb
TLSH
T125C62342F7E59E2FC87381314A9A173511178D16CB03E78BA86837BD38BBAE84E557C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tsengo.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.tsengo.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tsengo.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tsengo.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tsengo.app

com.tsengo.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4733

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation4880644193575883196tmp

Path /data/data/com.tsengo.app/files/PersistedInstallation4880644193575883196tmp
Size 569B
SHA256 f7736fae42209ed6f5a067ccec09630c1aebff48896316e65566b6fc7a91974c
MD5 588417a01762a20274d0cb46ed6cd2b2
SHA1 ee3ea2f5d1f29a704c4e1692c6cd060b126a8145
SHA512 514d16e7bb43ec8203790bb14caae6cdb9417cad6b6f21da39001e5349d0628a546424aaa3e3d72559189c9a361722965ef5fcba83fb5d04ffbbc226a5eda899
TLSH
T15BF09642D2014DCDF44E5700244DFF010E181C641C571DD57FC1C0F8C2F9A3DA147510
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation6009325280767761983tmp

Path /data/data/com.tsengo.app/files/PersistedInstallation6009325280767761983tmp
Size 90B
SHA256 4660ca9ba2548da1e27f81944e6fa9e79db725238a70bc3f0522d1ce07d925cd
MD5 1496de10373df14ae27c265f22c64f71
SHA1 6856babe0cf7d2b364b7905e0bdf6a93e7e0c8b8
SHA512 74ae99facc1c17107253d57ae24c8a85c29f77fa664c2f6d2415a9f0ee1ec67ac6449b10cf358bfb2ff16fe49f55af0601b8c194cc2eaa3fc1447b575b7622d7
TLSH
T139B012494A315143C9CEA30A1C4DD2006D9015410C498E150F09F4F182912D08113DD8
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTozNDY2NzMyNTAyNDI6YW5kcm9pZDo1OGRlY2JhYmExZWQ2Y2EwNDRlMDVi.preferences_pb.tmp

Path /data/data/com.tsengo.app/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozNDY2NzMyNTAyNDI6YW5kcm9pZDo1OGRlY2JhYmExZWQ2Y2EwNDRlMDVi.preferences_pb.tmp
Size 345B
SHA256 6007e7f7d831cb1f695a983b72fad66df9f733b4b5ab0cc6038fd55ce7154661
MD5 4ac1c5496d87e0a1881e7edf730d3464
SHA1 9f3d7e4813bf0830938fa8281b2c919ec03d9c77
SHA512 06588a8bba1dbaed91135f2a2e780da7c7bded1c0c991538544299418f228696f978ceb3c05dedb8ce0318d182aebdc8a4ecf543ec4331e33520d14d414b6a9b
TLSH
T1B5E02600D6E2AEE12D7F524D7FA8022C4F3FB3D2227A145A65F80080FA0E681D5C2F1B
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTozNDY2NzMyNTAyNDI6YW5kcm9pZDo1OGRlY2JhYmExZWQ2Y2EwNDRlMDVi.preferences_pb.tmp

Path /data/data/com.tsengo.app/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozNDY2NzMyNTAyNDI6YW5kcm9pZDo1OGRlY2JhYmExZWQ2Y2EwNDRlMDVi.preferences_pb.tmp
Size 321B
SHA256 c2da97e9506c7d9000286e62524eecd6992eb078bfe06ea6682c15571cb6a031
MD5 c30f763c88ae94dc4a0d8b9aa3922e5c
SHA1 68218e2266d538baf6ff5d2480281ca4ea4a79a9
SHA512 f784bee4726a1a9520359c17a1df5c8ea3e11abccf8007e7728f254d088581da49475f21e2101c5b6e468e557076a462f728def8dab5ffe0ff71d668d626b160
TLSH
T1BEE02600D6E1AEE01D2F114C7FA8012C4E2FB3922276045961E40080F60E681D5C2F1B
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.tsengo.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9ae93abfb3fbcec9d2cd13d82be6c1efc478514fa88f46c2fe17420458f6ebd9
MD5 c7072734c751b5a516d21501ea1a3bc8
SHA1 5b0ab67b29d99471f58c91a71a588c25766842ce
SHA512 2dd23320a85ca1c1d79f3cd70041831f3ef7ebd3d40df953745ac9332d29f367676f503c3f1973b397d97bf1e60beffbd8d67a46b3c536aec8e35b3921b24665
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.tsengo.app/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.tsengo.app/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 efa3ce67da66e8ded37c5a13d34944707254b5522f2e24a058a5960f6a550efd
MD5 13d657af26fe2f9f5962dfc3191d472d
SHA1 f0a5a3c38ea8bd168a966dfaf6ff887eb0d836c4
SHA512 4d712cca477a6879f73fa175d76e5497b7b342877041cfd0e031132ad9e1e5ad4062430d5e3a47af82432928f55a5546011fc86ede69b8b7f6bd474e83f379b6
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.tsengo.app/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.tsengo.app/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 318873ecdd9fab1e6d2f975bea4f37ce46e95a9f3b6fa24fea7a83914b3772df
MD5 759a4060760e272390ecf99f1f3a8d5a
SHA1 42e16bdd53a706de05d531c92f575dc579e1243b
SHA512 7949c61fb10c425cf6dbafebec26ee2afeb7483c3b952f925cd8fcbe6ec73127a2d86df54e5d34f9390c9bbb1305fe0825d0e0894feddc618e42a4438146d9aa
SSDEEP 96:F6+hdjnHtDRMpf8UzS6+BD8q0ExPyEil/:JdjnHt9Mpf8UzS6+BD8q0E5yFl
TLSH
T13AB3018F0F5D3940C4DAA4F4A5900FF1793E416ECB93E3E969914075AEC6920DE29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.tsengo.app/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 5890ee35d92e3ef7a38e2e05010e4419be6165e66efe99725ec41ab19836e843
MD5 416e347d40a5ac869ae1112f5f994471
SHA1 c43d34ab3ac55305c9971ea2d131cdfff7e4d71a
SHA512 3e2811bff9b3752a50adb0a2988da59179795b86cb18d9898cbb4e4b216fa8b3914bed658c3c292571c02c4a9d94e4bfbee9fe1bf8785dea9e049745c03d63c8
SSDEEP 12:KkesklD4EzdeWRmBEyPbP/eIfJ3dpLOw2:KjxzKGSP/Vpv2
TLSH
T17172C29A73C82622C14A837E6084C3801E60569C6B62C74F59A504606DC3A88AE90D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.tsengo.app/primary.prof
Size 2KB
SHA256 196050deaf034821b77803c9649ed5bcf86fc48d840a3d78b263e1d553852836
MD5 34cf72fab1dc6e090d7d035f299e5ac3
SHA1 5b35dcf4d75f83933676947102a856b2e347922e
SHA512 2e0d1e895e6ed6adeca5a138eee0d4f49abcfab070943d2d880bca7fa861ab61fa73b7cf5ca2af60f6f5c29781370b385cd32fcb17b7b298eb8558277b8e6482
TLSH
T10651191492D81A2685DB0760DD2A19044736FA056EFA7A073D81DC0FE4E74B3B9A3962
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads