1525db5050ce5d01f88dceee6c88bd18a1b89085d1014f74491998d37c58a096

Analysis

max time kernel
32s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
14/08/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
salehooglobal.apk
Size 782KB
Sample260814-w2n4eabc56
SHA256 1525db5050ce5d01f88dceee6c88bd18a1b89085d1014f74491998d37c58a096
MD5 18508ddf294003a039af4e27eeeacd35
SHA1 974e234b417c3beedadd815980df0789387c4bab
SHA512 fee111b04a2efdbdda7ff8e778bdc2753236dfb3b2fa81d55b2a5da1f26d5dfd8b31ffb10fce0eb5c58478807a0030a1275f295e2c13eb2f1e6c939197294d53
SSDEEP 24576:XTqstFhY6DPP/pVAy2fkfUzFJOB7nTPCrMQZgBCHd0v:eWi6DPP52fkfRhaMAgHv
TLSH
T19505CF92F3A95D3FCD7784350F6A833516129E12C996E70BA458772CAD3B2C94F49BC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.salehooglobal.salehooglobal

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.salehooglobal.salehooglobal

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.salehooglobal.salehooglobal

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.salehooglobal.salehooglobal

com.salehooglobal.salehooglobal
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4815

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.salehooglobal.salehooglobal/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 ca29163dc541b1d2802fe6b7a4e4ea72b2752777673a75580ec218bcb445fe3f
MD5 3dc72e62300d96f976c5f51909bc4f12
SHA1 19129bda209336a9f3ff0f18990bd59c8f209576
SHA512 99f364486f3b4db9eda42358fee2274401b0414c61e2f1bb170ee5279435089563a454479565a578bd621d0f985ce31014c5695708a3167f70dcbcb230a082f8
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.salehooglobal.salehooglobal/primary.prof
Size 1KB
SHA256 c990cd2a5d8241864a10abf68696d8f25c464f43e94f17dca6d9e864dbd1a5ac
MD5 d227dea8651dd63b753ce987e076d6a8
SHA1 cb29434ffa4d0e76167735dcc7c7309ac3d06eb5
SHA512 3ca96d1156515cd8b6c7dbe9012e408f3b6f21ae02870f25bfd36e54da21de9d23f8c01df1cbe27b55ecf0ab53ba38cdcf97cb15b4a25ab58fad4c452e8f2cb7
TLSH
T12C21FDBC9C4F3E46C8508325F4D26460FD36311443F55744E50B34AB421254A46DF7BC
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads