83a59d8d9229bd86740896325020bd5770d93af68ba783dd74b2803c6c4ccfd0

Analysis

max time kernel
148s
max time network
159s
platform
android-10_x64
resource
android-x64-20260721-en
resource tags

arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system
submitted
24/09/2026, 15:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
83a59d8d9229bd86740896325020bd5770d93af68ba783dd74b2803c6c4ccfd0.apk
Size 6.5MB
Sample260924-tb4easwejc
SHA256 83a59d8d9229bd86740896325020bd5770d93af68ba783dd74b2803c6c4ccfd0
MD5 2dea0b2c8faf56b7f808b85f3f548ecd
SHA1 71464c9558f044011f69a368ed8a06fc97602beb
SHA512 293a891d86f3914f4bf58d3472c00c3425874746ea94b35271b19cd3cc1882c88358b73ae7ebe664bbe71a22a836b63382d0b19e7fd3abbf9955bcfcdd6bca2d
SSDEEP 196608:mjalNi/QC6GtuxtA8whoh+GCkHj8+d54CbJcwK4U:E8iIdrAXu8+d54CbJcHV
TLSH
T1B766128AFF6CBD2FC87B40320B5A9231365A4D16CB82D7476544376DA8776E40F98BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.captgl

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.captgl

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.captgl

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.captgl

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.captgl

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.captgl

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.captgl

com.captgl
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5155

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.captgl/databases/com.google.android.datatransport.events
Size 56KB
SHA256 1219c9918feef3d33baf57f4c0490b7a527b0e79e3fef4dbf74042c7b5c3e238
MD5 0f9f2f07c371e86e548a6c79272512a8
SHA1 ba6a0976cc467e0652d99fa55dc48b297d6d7cd2
SHA512 10103709e1caf75c13470f462cc398bdf3796f189da6b0ae7fa35d525c86dd794cad06b58c4a8be5f3836f2638004d241ca4907d0cdb477f00838a5f352d281d
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSg:8MEX0wIyNjag
TLSH
T1E743619D5E2C2221C57E283ED7E243635B7C93DF572392623AA08CF98DC206974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.captgl/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 da184d9fbd627c42b2ec40d3a5151b58b0d1c75e4b94a8a89cb1d5efbf5de5a3
MD5 dc9b05019d91402fbd9bbb4e52ade13a
SHA1 cc9db030c99bc9c46f2160d5ba50c3d377301392
SHA512 a50aae5c5e9f287c26603e138d9275b059b6777eb73993df2baa70f8482b690015799cd989d55a1c051b4925a43bdf39132ebb03f11ee4f83b3d2a81729fca46
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.captgl/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 3623fa7296a99288ad9149bc1116dd6aacc70b7144c72d7f5c2fbee8b5cbbc7b
MD5 7df7936fdd6a07eb60a03231d93abd30
SHA1 10be6eeccf8385ff5c69b35bb6f3215c56a0a543
SHA512 ca108d65153518793c10547fd83416a2f93573685d994a4425148c08afe5843a5b5cff46ea2cc286ac85c23bbb9824200a0dfe29fee78fd02b858cb7172cb84c
SSDEEP 6:7+/l9jVn1ig9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKz:7+tkqLiuWdwRmBEyPb0
TLSH
T16B02228973800A22C8291BB7A0D883A80E00F71D9561CB8726A208983C0B4CCA8A0D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.captgl/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 6d5a5df491b5040cf0f1b2f3ac9e537bca3cc8d46d4a304400d1cba4eafe105b
MD5 62f21d0fff3487807250018db32dc8cf
SHA1 66cdafda6f3b0be626d3294c61166268e81d0afc
SHA512 7a0c4bf9f10706c526258b5c4cfc5040eb020bea9cdf89820beddcb2c51afa52ccb52b2e55b88035643269cf113bb807f43fe53979d2d7345004ac80ae2f4e75
SSDEEP 6:7+/l9dPlgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkls//pn:7+t36qLJdTRmBEyPbqXp
TLSH
T1670222896F400913C01917B790CA83402E10AB2C8273CB2766600C983C027CCA898E40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 40fcd4882371cf83fcca1e92c256f81cd0d2f7370c25d2f64bc3e9bbd3849118
MD5 57bc2462c005067f309f349c2eda2ded
SHA1 a98ac3fcda5c116c8639dcfe265069045a2a9420
SHA512 b30f77093243782fb5b8fb0cb9b1e90ad99f6cbfd62e564e5bb1fb080622cfdce56f45157ef28dc4bd1edd54ea910a96217d0502fd4222115c6733d279d7e676
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6FOD:TLiEy9zmzrfRmBEyPbP/P+/0Fl6H3u7
TLSH
T19D7268CDBA106703D1774776B0CB93E11C30A2198323EA0B7B550468AC42184A042F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 e51e1e934f70e82273596d436311759b342d2d47b1ca8ba523fc73303c0a22a3
MD5 184e8733fc6c7ea6e296199f2224427e
SHA1 0973bb2964cd8750aade9c05e8a79e9f7b73e37f
SHA512 ff22dfd09b654955a8b01088f6a6a30de5febca0e8e64e8d2a1506f0e91196e164b64e0735265ffd16e62f9a985245d5cc3b7cfdfc95e60b26f903009d206f68
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlAu6/+/0Fl6H3u7:TLQpmzr0GSP/h1499FKxlFv
TLSH
T1AD72E999BA10D707E2774B75A0CBD3D16C3472165723E51779161E2C6D423855052F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 f3fe451c199d5479b30d61dcd517b9d1ccf86fdd37dd67b5525e00e5213a7f7e
MD5 6fddd615e5fa5ac178d6de0a7ee49420
SHA1 eab9d7727f87dc9ab323a6f8db56bf4e490f2818
SHA512 7102b0657882d76275db5477f44b6299d760c2328f5c5bb1071727bd7a0fde605df4fa2784c95473e408ea7545035fcadb6b593ca88d246982dbd18130eea3a5
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/wolhOLauAUZw2qc7UyWlRQ7R49blqYFlAu6/+/0Fl6e:TLEvpmzr0GSP/wovKaufEn6499FKxlFv
TLSH
T1CB727688BA64D707F2774B39A0CBEBD1393871624723E20B7D161B1C6D423818161F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 87041972d29d8b9bcab5f6ad099f4d8f3a93fc2b432d647a5beb5a009fc919cb
MD5 318934b43c13ca539808c8391de28694
SHA1 28d80d82fccca2f3df64aeb9ad803c02bb4dfdc1
SHA512 774a1f40fad48d64bc3b123fd0dbb62dd6b96a8d48541ab77b83b18f7ef908208f2e453f251a67bbf984a26330bc2ecc9da3ab3f1db77af45834bbbd28e08012
SSDEEP 24:TL6Xpmzr0GSP/o6ovKaufEn6499FKxlFL:T2XArSP/onyaufE35KNL
TLSH
T170724288BA64D602F2775B39A0DBEBC1393831224727E61B79162B1C2D423818021B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 c76dee1bb46a7dbb123274cdd118a5fe1209b8443ef578cfe9073b0f8bfb62da
MD5 5238f29e3049fed162fa439113c71069
SHA1 31f4c91949db1e77fe03e422e22fef350c43eb68
SHA512 2848bec5e8a3a215933ffea967b0d1be4e328518eade3ee3a3885a2227faf18a072be6747a6c541115a3ff58ae4acd94c60e6783c895ec296a98e31270051651
SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WMWj:TL6EK9zmzrfRmBEyPbP/WMq
TLSH
T15E72C28E9F102602CA670672B4CEA3926D24A2198737AE572AA44864AE42649A091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.captgl/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download