c1dd346dc029155e5728a00fae58542f8fe52a9dbb0d47394e59d53b59de3ac7

Analysis

max time kernel
17s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
18/08/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
拼豆助手-release.apk
Size 4.7MB
Sample260818-wtak2sxfmf
SHA256 c1dd346dc029155e5728a00fae58542f8fe52a9dbb0d47394e59d53b59de3ac7
MD5 318f7086284c723a4b21bd7019dfee7b
SHA1 f8ce0cbbac9ff3dec50869fe9af72fdc3b46fb8a
SHA512 ff1677e724a60fcb59c20a4740e34279bd65b203588517335859648d095fdee7f454fdaf1a1f1fdbf407badd06c906510619962f0cce9d8e3fa10aa334349c1b
SSDEEP 98304:j4qSvjuHPZXZ1e3HLE69fpB8MiVe0Ld0cRQ6ANKo:sJAZcX99f5meW0c+V
TLSH
T1B1361243EB951A9ECC3E44B51F870AA81F016F0AC182DFCB4954372E7D7B6D64E19AC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.perlerbeads.assistant

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.perlerbeads.assistant

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.perlerbeads.assistant

com.perlerbeads.assistant
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4779

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.perlerbeads.assistant/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 12c208246302792050ecd850ce3033377eacb0de5f08688ce7b08c31bf4f0b53
MD5 5ce912ee9e75aab6b954bf69835d067b
SHA1 28a5dc907b16fe3a5e811a3145670a643a47b331
SHA512 17cf9c84beb9390199ab317b91454e83f175dd832845634e3a2b7b8df464808427bb8a3fffe1f1d88a31675b8bfe9878b4714bbbbe2814232bb700a0ade210ef
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.perlerbeads.assistant/primary.prof
Size 2KB
SHA256 033d9ff3911b00710e28a0c51aabf2bcbb29db8a58af5d58262d29bd47e78919
MD5 42b0d1d9365ae0c7f9ea4286b0f2db22
SHA1 2dd17407aa953d70b72515896afbd8466a2109da
SHA512 dd9844a16b718a54162f73b3f97362447a06fd8064797b30e0cc0ea29df62a003ec7e5642285f7b506f1b46f5c4176ca6674182e1c7648a14ccccfcab96185da
TLSH
T18B417E1821A8CCC7A5158311E5F524A12C5BC2A0EC347B9F02B1DF3FF20B0588297D33
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads