f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260721-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
submitted
27/09/2026, 07:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222.bin.apk
Size 10.1MB
Sample260927-hwpabsag39
SHA256 f1bc12e3ba3d2e7f0eaf02c4858fb44d5e34b861718cdf0ddc929e4eef3e2222
MD5 a5a750c18005538054549910c3bc50a1
SHA1 fd8c6502ee9c75c60f7f25e7c22f13d86731e0d8
SHA512 65a3bb92ed7a4ee20648c248c61a84b24091cc8ba4f9bd7bb1e8e8bf79c1bf93105bb048e7966902c062fdd283d8fc5be7547eb5142553cd224df399fd68559d
SSDEEP 196608:kQwW9IndQqKxLM9qxxCmnqoZvTB85RAi1pr7ZqbLkC4Hlf8RWDyc2:kQwleHJ+qxEmFZTqfW14FEr
TLSH
T16BB62356F3E4AE1FCC3790334BAA463711568E018A52D70B792C772C2BB7AD48E45BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.platininvest.alpine

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.platininvest.alpine

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.platininvest.alpine

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.platininvest.alpine

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.platininvest.alpine

com.platininvest.alpine
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4483

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation5209684071252981471tmp

Path /data/data/com.platininvest.alpine/files/PersistedInstallation5209684071252981471tmp
Size 90B
SHA256 608075aa56f37c8756324b6790784631959747d23828a43329ebd48ab05cd8da
MD5 35860ea522a480619446ec033b732a27
SHA1 f333d48f1c3de01d4984c8ac51f6a25d910cff28
SHA512 d5541bf8826226f11d0e19c748e342f670a28f53c30c08212eb6b6876b58887bec5c2b1bef268663e87adc49d4fd9d0811f0cd4b2d0ea8ba9930876347627575
TLSH
T103B012014635A2419889B2021D5CA940DDC11481080BCB080F09D45000A12D091039A8
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation57984051053569325tmp

Path /data/data/com.platininvest.alpine/files/PersistedInstallation57984051053569325tmp
Size 562B
SHA256 172e1b1a37547ea379fe0dabc3f9b140ee790621ca48c51bcd7bf919732b7364
MD5 339c5a1dde2832500f677a657787ad9c
SHA1 05d9f46bb7f51f66e74e3bd9b6bd0098e7b00053
SHA512 62ee8a26c9d687d0e6ccf4e9fd1f845004f4a3a16fe7654143a0d68f7f817b0b0462cf98e256a51b3db8ca08c2a6e88337d54852d7ac785ce553cf630015d267
TLSH
T12CF02026BF685280FB652D0B7BCCBC038E888C61666695D73EC6894094D14DAE523010
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads