70af4ac2a7ec38b06de4fcb6d18dcbdf7ddc2095bb8129f0f84860dcb995dc0c

Analysis

user interaction
yes
max time kernel
238s
max time network
246s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
09/08/2026, 21:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NetMirror_Updated.apk
Size 49.3MB
Sample260809-ztwp3awamd
SHA256 70af4ac2a7ec38b06de4fcb6d18dcbdf7ddc2095bb8129f0f84860dcb995dc0c
MD5 aa76bd1becae0c3f8a70d2ecacc4b10d
SHA1 59c1569efb4aabf9d35bb60d2b437e23005e4a46
SHA512 c11eff53b2966272bb852a4f409f6f691badd1c5ddc17559fae0d6f05bce98e343cfb2ee7108061dc32678300c2ab4dd85dbefe8de17815d8a8b775541d48d15
SSDEEP 393216:sY9bFyXlPR0tMYkjhbBpqtu7tRlH5GmTY5VyAejtogK:59bYlPCt5kjhFpqtWrjGmTU+toX
TLSH
T16DB7AF46B34A8C9BECD774F8D50B52B1AA207C4443A260DFBD06D78479272E66FBD381
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.netmirror.netmirrornew

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.netmirror.netmirrornew

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.netmirror.netmirrornew

app.netmirror.netmirrornew
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4749

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

c357b8c48d7622e5b83c8ad4e4574a5d.0.tmp

Path /data/data/app.netmirror.netmirrornew/cache/http-cache/c357b8c48d7622e5b83c8ad4e4574a5d.0.tmp
Size 3KB
SHA256 a96984ec487540cd2b23b468ae258c72e547a676405afc1ba571bcaea74c14fd
MD5 dd0311c938576b372eeb8362fe2164de
SHA1 130d909b82c0830e1e57a6b01ce5f11db4112560
SHA512 8b3d54efdae4c2126665802139489b6e5856ffb7c0197db473911680b6ce3bdc01f2530f6cbf6855e12ff3825a039bf1309d2be440d8fc36b99da71f3bcc7a10
TLSH
T114712C7E4FA81621BE61F4D2CE8E2B492050624ACBC4D9E53384261386447BAFD1398D
MD5 SHA1 SHA512 TLSH

Submit Download

c357b8c48d7622e5b83c8ad4e4574a5d.1.tmp

Path /data/data/app.netmirror.netmirrornew/cache/http-cache/c357b8c48d7622e5b83c8ad4e4574a5d.1.tmp
Size 194B
SHA256 035ce8b771c80996b83db5a572e72b0817c0dfc56daaef24cf9659f219899838
MD5 4b2cd29af67c9ce45a29992d395bd799
SHA1 4173eddb0a82e7223881ee6b62422534224f4ac9
SHA512 ffad5d165524a5f7779d6ed5fde9f33ac5c61d42ce08c8df46a5a137e47e0f72cb3b54e67279fc9820b686837d7aa2fdb8b5a1d6e55cce29dce1f679054f24cd
TLSH
T122C0C038ED1B9804D3311E32242C81EF4D01E40A8787E1C39028ED4907F41C48CDD3C0
MD5 SHA1 SHA512 TLSH

Submit Download

journal

Path /data/data/app.netmirror.netmirrornew/cache/http-cache/journal
Size 123B
SHA256 03f169fda43a44b56fe9d93fa83682acc97e4ff9492aeeedef59b910c6539b82
MD5 abf55433ebb7cbb297b22324c587190f
SHA1 83ff9733d0ff618d499fc7d98cfb17e384c3545d
SHA512 ab62923d56d219669cacdceb28e22103e68f4baa99dfe64c25e07f14f646ee0c86be5dd6214b0bd20ab88a4c8ea8bf443c233a6c5c5eb00c9a1abc056130db1b
TLSH
T134B0025423549B47E54511F37C4C9187E478C7A7184DF92361F5701323415C242A144C
MD5 SHA1 SHA512 TLSH

Submit Download

journal.tmp

Path /data/data/app.netmirror.netmirrornew/cache/http-cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

RKStorage

Path /data/data/app.netmirror.netmirrornew/databases/RKStorage
Size 20KB
SHA256 7502e1e5da653cb70b6022c20f619010f274625632ce798a99ec60fac9321f39
MD5 74fc9c4679e7f003639329a27860d944
SHA1 3892a362578fc4832fa4ccf21c590eeaf978f40d
SHA512 f1047729e0c35dfb31bdb9fbbb76d4f165f3e155b0e2931ba22d46b4e7a47111e093a4846c1f4e211c8a7a2c98bb77d99859916be87e3b01650ae9c3a2014cb0
SSDEEP 12:TLyKjqRVcMEPVcMEeF8cMEg4sOscMEdcMEmRmBEyPbAVOwFWxF:TLyAYcFPVcF5cFG5cFdcF9GSE2F
TLSH
T1E0929E9A8B021106D53A50BEA08A93909D7056BDB169D34B61E280107CC36CC3F95D8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RKStorage-journal

Path /data/data/app.netmirror.netmirrornew/databases/RKStorage-journal
Size 12KB
SHA256 4500c98528e853a3e84a5ed666ca90885ca6f16703e2cfe51d1969b88305ff80
MD5 77a4183d11eca6c0c50eb46de51cb975
SHA1 1eea0c264176fed5121dfaf60a074671a108ce9a
SHA512 2ca7f10eae6cb50a248fd2e2951996e0f5f2250566714c0bc3e6acb5a522e73475ed69cc6546a56fb64f378892a618f97cc3c1db84db3b56bd683c91c6f4d05c
SSDEEP 12:7+tOUppqLm8qRVcMEPVcMEeF8cMEg4sOscMEdcMEmRmBEyPbU:7+tOQpqLrYcFPVcF5cFG5cFdcF9GSU
TLSH
T1AB42E55A8F125521D62FD1FAE4EB53109C705ABCE1A4934626E24410BC875CC7BD5D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RKStorage-journal

Path /data/data/app.netmirror.netmirrornew/databases/RKStorage-journal
Size 512B
SHA256 5454fc58538586f267726d99f9c0042be859576521ceebd16921edc409bd168c
MD5 708f4e3223a47826441e87e73d434e11
SHA1 d950890b5f87bbb4271c11516d08da9b9e614a11
SHA512 75e4811ea5679fbcbcb938ec580a5edf9a9a35de0476402b0881800dae5c2cf99d1748b13f21b5f5856eb3fb63922b7b2d602c3cbc503302587f9b61b63ce787
MD5 SHA1 SHA512

Submit Download

RKStorage-journal

Path /data/data/app.netmirror.netmirrornew/databases/RKStorage-journal
Size 8KB
SHA256 29a7a9b5b2ad7ccc3bfbe9248bf24f9867bd0b1285a90381f437bb2df1ca0300
MD5 32c455b04d22450320a0abe71a245af0
SHA1 3fd430ab4db79c78a6f22013dafca1177d9fe77e
SHA512 6b6feb6ef385089452d46285254de9eba4e259eacb2c478e83740255514033b11f799843b73fcaef8212fa79f8ecca4cf163fc78657d1b50927411207889bc97
SSDEEP 6:7+/l934n1Pvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKs:7+tZ2qLiuWdYRmBEyPbb
TLSH
T15702228963C21822C82A167798D983500E00E7BC8B63CB277AA008963C074CCA4A1D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RKStorage-journal

Path /data/data/app.netmirror.netmirrornew/databases/RKStorage-journal
Size 8KB
SHA256 a7653881273d7f967aeeeddf5be1db26f5af949e7560aa674dd57fb0b8fbd60f
MD5 4aea18a810f71604fd742c489a6036ce
SHA1 99b723014314ef9c5dfb46f9e02a8636eb66e97c
SHA512 c101afb6650c9b743cd169778158c9782cfd8ffca45bdc28f873409f0008fefd5a491d53576244128d9a233e9fc0947c1b8149fc755284f577dd93e59f30435b
SSDEEP 6:7+/l9a4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKzFs//2:7+tvqLJdeWRmBEyPbhX2
TLSH
T1810222AA63400D03C0392777A0CC83402E10A729D223CB3726A118942C0BACCB890E01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/app.netmirror.netmirrornew/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 064077d177a1ff0377d733510cb89d28c674026179c26fdee5f6ebe3332aa0f6
MD5 3b8c9c8b300b79d8769eac1b7ede32e7
SHA1 700f8fbf7452fcf9c196fd26440949d31d710ab5
SHA512 63cc88c57d825591e2fe2d6c6d169a6d1266f803465aa8ec4150fa2bc2327824165eafe49e28f2bfd1746bbdbcc4b7afcf997d717947946e9549360caf42ff89
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.netmirror.netmirrornew/primary.prof
Size 2KB
SHA256 c8778e8a66211594ee18cdfc43d72b41dc1f25752e93f6c738f4f0981a2fb954
MD5 5fc30a73ca1f0c3d4bfd22b6cc20c430
SHA1 36f3f5bed1a14b614aa2c239ad978fd16a408cad
SHA512 b2a5ab112e3a9b304c87c70eb8bed01e3e99c9659f928316dddfaa89880c1dc524cc697a5df78d950bc7434eacd3eccb3a1092dcb852008b9131bfcfcbf4ec02
TLSH
T11E411A798C40CA26DC201476C6E7754B31024C3DDD17B278806C89B38D80D425EFCDCA
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.netmirror.netmirrornew/primary.prof
Size 11KB
SHA256 b5efc6ad42654c0c8834cf4f23f1d5bdc8ca8a14962b394151a9cecd6cfb714a
MD5 dd17504af841b8ed4ff06600c26e56eb
SHA1 44bea357b5b04998cec49e9320910bb96ce9d72c
SHA512 f0321220f6301cb7f7525c1c980a41bd5ffae3bacb4a71c7c1e68e7dea324b732de5ef5f1aa9849744dd2424ad1a063d859afd95cdda99a7ef3495fc63a240fd
SSDEEP 192:zqqAG35DqSmBqXvoAUuFhFg5LxApSD9O3MG0TFXIaEw6EtlmvkE23tmgzZ:2dG35uScGvoAUuFc5dD9OmX4EtlmvY/N
TLSH
T1DE42AE8F6F526D67BF83E070E861E8489E1DA4320F1A915488ACD105DAE817DA17CC7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads