3df336b217fc7381231eee413ea4b54b17cdbf2d72b034bdbb22c0edd4b78567

Resubmissions

27/08/2026, 12:05

260827-n9d96sgq3w7

27/08/2026, 10:20

260827-mdk76ssgrf7

Analysis

max time kernel
86s
max time network
152s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
27/08/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Sam-Helper-No-Root.apk
Size 3.3MB
Sample260827-mdk76ssgrf
SHA256 3df336b217fc7381231eee413ea4b54b17cdbf2d72b034bdbb22c0edd4b78567
MD5 47b541b2b93edaf3709c4a8ba7a10381
SHA1 024a1de60d1e795ef9819061eaf831341fd0be03
SHA512 cbcdcde8cf65fbbf965a9a14f0a4c7b4f7e8a9d655a4e625ed90341e427164a3a63aba835de72906901a875a04c8fc42a32deb29ba2e764fda00d5956b7f98e9
SSDEEP 49152:YF03ly8zrim+kx1dD73gyILVQlLU7gtcZOpksoDRw0N6ajyGe1nOhYYl52:by8zrim+kx1dD2+6UoDRw7HFnOh92
TLSH
T1F5F5D096BB85AD2DC87B51324CAA1336739B8C168FA383576944371C2CB79D80F59FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.litebyte.samhelper

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.litebyte.samhelper

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.litebyte.samhelper

com.litebyte.samhelper
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Checks memory information
PID:3257

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

base.3257.tmp

Path /data/data/com.litebyte.samhelper/cache/oat_primary/x86_64/base.3257.tmp
Size 265KB
SHA256 0b0493d8f8f2fc5170c7d93cdccbda11614b8cffd164bbbcd45caf712e35c4af
MD5 266d11008d2fc1753e5d951049911775
SHA1 c04bc539c45c246eb4decbb6e96c21ba1cbf9483
SHA512 f2c0ce88d6ea3a3e526e60b3c1110db72ff9663c78bde16a2a71c8818a8cfaa67ca3294735045d58eeee3bfb01f40c6719043a865541f842ac29ae208daf9383
SSDEEP 6144:Pl5QlN8VCudBEi6G7UrxCLRGzggc+PXzAbIAsFbwn:Ql2LdqWGx48HDvE
TLSH
T18644E75FEAA39010C1FBDEF79B8B56ECF92D8025160E1D1094B17B7FA019A15E760FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1787826079799.dex

Path /data/data/com.litebyte.samhelper/code_cache/1787826079799.dex
Size 2KB
SHA256 3834c792435933cd916d886f9842894316a99339a0368f7bae255b53683a515a
MD5 b5226ede1106261e7c438744eee9a864
SHA1 352593a2577dbaa67b26eefc1629a19cc2c9c2da
SHA512 7e410caae4666f8473266cac4bd163f7f2093d3f2e8778b50d347eeffe3cd4ed37e0d8b84c38ae85a28b7e50a2a2db3e8661ec51b71a1d9db876e98827aef627
TLSH
T123518733AE426342E1AD617F54CBC7A0223084045941DB17ABDCB62E3DEB1E92FD769D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.2uhRdq.tmp

Path /data/misc/profiles/cur/0/com.litebyte.samhelper/primary.prof.2uhRdq.tmp
Size 2KB
SHA256 cd6d46e36cc8216fb13188dda05d4c3c26229c0c1b7d4a57c3fa6c6f8b2b652e
MD5 db7a970917c79741b4f49a6a23335dea
SHA1 277d8d146ff9b9101e580b428abcaef07b98288c
SHA512 2c1cb97caa3d16a1d13daaed721577501ce03eae79049f163a4368ebaa0bd5e01041e132a8d864fb98e61b18bd0ec9f7f9525cf28594c8d43c9dcc303166d632
TLSH
T17651390F66A04392C490B1FC867A804336AF356C66722533392D0A947495880163F8B3
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads