f3ed4fa6d7c12b16e8762cf41a28179619c633f9933f2590c6777a544b71da01 | Triage™

Analysis

max time kernel
90s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
26/08/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tongtoto.apk
Size 5.8MB
Sample260826-pewfmswsax
SHA256 f3ed4fa6d7c12b16e8762cf41a28179619c633f9933f2590c6777a544b71da01
MD5 93d4b229e61ace736de4999dffa3cba4
SHA1 5b48717572b6688c08482c3be357483f5005a823
SHA512 3ce5e3aa2696b4aac9fc211e6107661cf65ff5dad852e23eee512fe93cdbc768ea0d6338ddb4a70076c50d749d44c3dfe3c7df7c17ed23fe72f704042bfa2cf1
SSDEEP 98304:Qff3bsM6m4lEArS62xYGQ2JqkEklgoNiayPmWbIOpN+wgUPkdf9P49vF:6PbsBp2xjQ2JLJlW5b/N+dVP4hF
TLSH
T1655622C1FBD8EC2FCD7B84324BB68B6B524A4D168296E3170659B12C4D7B9C44F58EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tongtoto.app

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tongtoto.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

System Network Configuration Discovery

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.tongtoto.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tongtoto.app

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.tongtoto.app

com.tongtoto.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks CPU information
- Checks memory information
PID:4753

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads

com.microsoft.appcenter.persistence

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence
Size 24KB
SHA256 3644529bf0fc9cc5098751888be49f1d25f7e5ccc0cf453cc99f6cc446648f9f
MD5 3952cc8ad2794158e5501dff5bdedc43
SHA1 dbb96196be89404534f4b8500b193392c3516c8b
SHA512 84b10ef93fe0f0d58a27b31341cc3a5095d650c9a79aee04a3e2d2ab712dca440d8a2bbaeb4d666f0214afaeadde842bd8956eb1596018289bacb5b74e8caabd
SSDEEP 12:TL0BrJNDj3OTSFby+wERXqFww9r6CqdMQa5n96sRmBEyPbD3Owp:TL0jNDjesw4ayMuLaC3GSz
TLSH
T1A3B2ACCB0B1CA657C15CE172DAA3E7A241F12A0ED2BA9FC729E064607C477849C71E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 512B
SHA256 4c764140a65e985ed9162ffeb67edaed051661aa373b9012650c6cde6fbb6401
MD5 95abd6966a3fa1ad4c66b3b3345af871
SHA1 6cb94a1e36f83134c5d346ef5f1156ed93ca754f
SHA512 ec19a5a7b70e8e656ffb474297c2908c7229933d6c241516044381873fd0bbc0ef9e4e3053a8d7c4b57f38d44d6fdc174834a4d25052556a5bac9ed8564940f4
MD5 SHA1 SHA512

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 8KB
SHA256 3e6d42e20b8e4962bffa4e47f2f07ad6001afdb1a732a163f7ae1e5e348d5592
MD5 af9defc58ebb0b782a763ccc602be7ff
SHA1 0f19ae7da4baba441eac91625f2ea7d8c069179d
SHA512 f683346dfd4fe1a0f2c236cb7590ec7b06d13907291ea12720475bdd0e9cfbfce0cd611a68273da98abde015cf92ed4d6d5380cae9df6fb758332fc2db13943b
SSDEEP 6:7+/l9/6gn1+l//vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK/n:7+tMfqLiuWdYRmBEyPb0
TLSH
T13602228C63800A13C8399AF790E483400E00A729C262CB272A9008A43C078CCA4A2D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 8KB
SHA256 5d77224217f7f598b3eba74cdd94126963127b8fd9f2bf04ab7e65d60d7a6daa
MD5 c26945ad13a7765f0777723f7bdaae22
SHA1 3a18c56f960d0d1bb005e3bc271500e1d6577251
SHA512 62af091d6d4af29dd3c266fff0a0547643c75f9f741bfc910a5d4ad7fa87dc4f183917c09ae8ec90deca1247fe3924b2a8a42e712b3a066a1d1467e726a2d3c3
SSDEEP 6:7+/l95gPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK7GM/j:7+tf4qLJdeWRmBEyPbWGsj
TLSH
T1FB02C08873800A03C03D1B77A0C8D3401F14A72DA333CB07369118543CC77CCE894D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 16KB
SHA256 e0f4c1a122ff4db929db62e2d4039cdb6e002364366f0e8edfeec73269060553
MD5 d8d3477eda30a7def1402eaa3b4c5e2c
SHA1 9dd6e7a8b98f6a61512768d5990aecc925e34132
SHA512 36c33cec02c28961f1f8354d6a694f21b6da37b4b1f2eeff7283435c9ac61f59b51c11204d7c11db82bd172c6fcc75e81c7a3bdc9ad84f71413b7a15d2cafd1e
SSDEEP 12:7+t79y6ifqLErJNDj3OTSFby+wERXqFww9r6CqdMQa5n96sRmBEyPbl3:7+to3qLUNDjesw4ayMuLaC3GSl3
TLSH
T19672ACCA0B2C5513C559F1B9CCB3D25244B1230ED2BA5FC22EE095707C0778080B0E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 16KB
SHA256 0fb6928138f297f193e2db90c2e90c368a1c029b1eb6f219f835e25bd4159be0
MD5 042563296be6ef0ce6cb9384859a1a4e
SHA1 e16095b4786be5f38d02b30ebe790c2a8f8da064
SHA512 fc20ff4740e6f1549707b9bbc67c0ab439b779ae6d8a5c439ef8ce56a931e921d17555edced6403d594a58ab0af515a53f83b49223cc8899d3669a4ae1ff275d
SSDEEP 24:7+t3ViUwu04mAaaknuYNAxqLkNDjesw4ayMuLaC3GSc:7M3wwx6Kqyesw/tkajSc
TLSH
T1E87263CE875CA937C69AE7B58897968144F0031FC4BED9852AD049207C8F6885470A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.tongtoto.app/databases/com.microsoft.appcenter.persistence-journal
Size 16KB
SHA256 d3fe4170de7fd716d2f6cf142352f6078e090bd6ac79cda076e8a663a97ab994
MD5 04415dff6a13ac17bcf489d5c214364f
SHA1 4aa4700c8625a98dea67486effe3d260649ac23a
SHA512 03c8d1c08eb33ca5e08cfa485c4499c1bb6d74c3e9401c16dcc8e931741762a6c06625ffda97c2fc4054ef601aff0fb268fd950a788b01aec5da3f16b9b1e589
SSDEEP 48:7Ml6kU/wxutvUe3xvqSesw/tkajSnqSesw/tkajSG:7sQY6sWRb/nb/G
TLSH
T1917222DF4A1C5D17C29ADAB2C5D3A69281F1131BC1FE9EC62AD15C70BC0B28454A1F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download