8e1a39e1acf27e261dba041f5436f038528002c8e003034a038d95bcc48fac62

Analysis

max time kernel
99s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/09/2026, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rewemind-android.apk
Size 5.3MB
Sample260908-sld2qagc85
SHA256 8e1a39e1acf27e261dba041f5436f038528002c8e003034a038d95bcc48fac62
MD5 aa4ea8c26e4faaea2adf0520ebc022aa
SHA1 12e9403d0189641da3fe07bbe5fe2abbe475d303
SHA512 0176da6e6c354ee36709216dc582df7ab79471769cea626dd434eac87b5d1af5807f9827a2e93e9f02e12b9a2cf1f11c43e3723dbf51c491b70a3c0b2673b856
SSDEEP 98304:QNVTT/xlAZA/4UGfw2ulDoIwYxXjwDIEyawB16pgG9GdBlV+cI7xHJvr5otFJG9N:QLTT/xlAZA/4UGoDe48C1agG8JUxWY9N
TLSH
T197461282EBE15E9FCCB7423A0B9B573116A18F46D9A2D3078944366C6DB73C80F54BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.rewemind.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rewemind.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rewemind.app

com.rewemind.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4793

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.rewemind.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 974d03e51da590ccbc18cec17c657256d11b06accb5907c44e376c038072259b
MD5 aefedf6468b162651f3a2af78d709df0
SHA1 f7d8ccf258eac8088477378791a950a2199f3ac4
SHA512 780c6ea088d6757ec9b51a8ccbd1284e5d4e3872b16f2e2d0c82c93e28815b1cc291841431c4cfe42c203b3e57361c0505dd9689dc29f5cc82dd5acd19037a2d
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.rewemind.app/primary.prof
Size 2KB
SHA256 cb8b210fa72f0930c141e29f70361abe03603c7240a4cb43479555b5ea375ad5
MD5 9a151824e73ba043d249a7622a47371b
SHA1 68df6d645c11d6fac5365a9fe382df3be337d8c3
SHA512 787ea4dad3287eee9c76bb067f485c7b852a9283466ed4678a1017df674b0d090ab39a373092c2640dfd3cd773e49adfb5a91dc14f6608c62906d8713d140545
TLSH
T19D512C07EAA008592839591EECFA50D6378E00CFB8315A81AB7FD06BCDC007A5968DD1
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads