d2f23ee841bc0dcb3211bc1475b80dfeff8a7747f2aa75127c4433ab900411f2

Analysis

max time kernel
46s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/09/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lexpad.apk
Size 6.6MB
Sample260906-145amade48
SHA256 d2f23ee841bc0dcb3211bc1475b80dfeff8a7747f2aa75127c4433ab900411f2
MD5 b65705118fa8e077dfcc7d02ed62c97c
SHA1 be567f12f25d612f4a38ec4e075fe594a80f708e
SHA512 300789609e46dba06c25a50aee95cc6b3578b658fad3563d6d555462651c1333c7172b4370073eb7b086c5b39325e02d40ea9d8969db750fc156aff16f49faf8
SSDEEP 196608:mQfsLV9qZC4pBUjjiztb3j6DSJ7NPaUrb8:mQfdC4s/ixb3jLno
TLSH
T198661242F7A89E5FC87741720D9B5732266A8E12C7A3E343991837797C736E80E84BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.lexpad.android

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.lexpad.android

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.lexpad.android

app.lexpad.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4769

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/app.lexpad.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 cbd0242aedcae98a0032f4f8e0caa3c118730fc5595615820d3b83514f129650
MD5 da33ee74fdd969f237554a4ab0cfef1f
SHA1 01c9b2c543b5643285d3e55abeab3fc98baeec55
SHA512 dbaa2253a3b8d7d66cd1a897168ca5580799c5061e5363d8bd3912dd78e7c422acd7c93f88bd7492775d64b7dc00f265a11a3eee8e07872222cf4607fe647b76
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.lexpad.android/primary.prof
Size 2KB
SHA256 158c3c5359da03e4b7665fae41ce95c8743b7686926507a01f2d01a3f5231994
MD5 8eff5e72650a718867d0a92e56916450
SHA1 2f77b230740babed5faac56d668ff2f629698efe
SHA512 272fd6c06c38b06244b1e8764b69277825e5520f5dcba7345ce03c73eb081660ac70f5c813dc67cd6e80c015fadaf34da8a5b5349fd68603f1457bfb7c1006ef
TLSH
T1E0513A0A9D40EE81A5E2AB41E828B40DC7D1DE8EAF42D831FA595F2B0407F5837E15CD
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.lexpad.android/primary.prof
Size 5KB
SHA256 4f6db8f886fa9900493da1346a99ca281b4fa03093a7a182a0420514e4bdc990
MD5 24816ad68c27cbd139c8ab84202da3a2
SHA1 88c40504074b4dd101ff3bf67debb759b8a20c55
SHA512 065dfffe55656c8fa3d0a208d0ad7f4db944237ba2b72091f3593a34da01b77642141c6fb1db3a1ce2619369e2ff6a88d7e6a7d59d12da51ac21f01da1e2abc7
SSDEEP 96:ONe7pmxsUTGo2QE2BdiXPiDVliliF5CpzHVFzvod4qQGDeHkfoAo5SfE:ONe0UhNQdCPiD3uS5CZDi90Hq/G
TLSH
T14FC18E53FA30E163749783681842E63508E30186714972E599FDF777BA8AA8833D7DCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads