b9afd4c60ce2ce3f4cdd8b5ceca4662a9191ca7a986d1e2769e3f837bfbe8bc7 | Triage™

Analysis

max time kernel
23s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
22/09/2026, 18:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
shell_320_01.apk
Size 2.1MB
Sample260922-w6t58ach84
SHA256 b9afd4c60ce2ce3f4cdd8b5ceca4662a9191ca7a986d1e2769e3f837bfbe8bc7
MD5 23d16f8bcde804442becb730b9abab6a
SHA1 76162eeda1c3a26d2f4cc614596166d9e655a129
SHA512 3bd444cf6c3d8c7929d47507a033b0c57d6ad347468e653940dcc93409136c87a2d64640c922af85fc949b38a90935a14f9ffd48d97d278ae0c980fd7083fd5e
SSDEEP 24576:O4wHOlia/xpZ40BkHTEfv1QPJcSmM8jlI4Q03wzhB97pltdPjFbFGZQIYyhhLoO:sRJcll3wR7PjFboZqsv
TLSH
T17AA55B0BA2814B33DC6F1370C5AAFB716F31A95B7F53470B424CA2F12C976E76686186
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	nevmdul.nev.nevmdu

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	nevmdul.nev.nevmdu

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	nevmdul.nev.nevmdu

nevmdul.nev.nevmdu
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4773

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads