7cc07f49956da7e9ce106a70fce91bb893ca8177789c9af26b2e82e53d8a877e | Triage™

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
25/09/2026, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
itsmuttakin.apk
Size 16.0MB
Sample260925-w6fylagg46
SHA256 7cc07f49956da7e9ce106a70fce91bb893ca8177789c9af26b2e82e53d8a877e
MD5 a1f57d6736a1edd7dbba530f81527ec6
SHA1 d1f4a4a3739df18e837350cc22d3a7708927efeb
SHA512 5266a5311889e7fb6752374db253abd199ecf7bdc41ccfda1fc9c2a1f4bf89a54661578e7f3d8b0604a0bc532eda06e210ceaee8718a9fb83eba93ff51561d7a
SSDEEP 393216:LrE1gtW870OgcjhH5iEIq13yBhdBY9wWEDEBkBhdAWOWP9T:3C8dw1cj9Wq13ytywWEIBktAWOWP9T
TLSH
T1EF0722C1AADC782ACE738637CB66F1FD45A3EC4E8691D25B6934F108197B58C0D70AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.itsmuttakin.app

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

Internet Connection Discovery

flow	ioc
42	api.ipify.org
43	api.ipify.org

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.itsmuttakin.app

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.itsmuttakin.app

com.itsmuttakin.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4795

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads