4152dda339a51e9d0afd25c9512c1a7f0bb92f6fda00d3bd58f3686016942cda

Resubmissions

29/09/2026, 16:15

260929-tp7nwaba447

29/09/2026, 11:09

260929-m9c7fayzes7

Analysis

max time kernel
25s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
29/09/2026, 16:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LudoMiza.apk
Size 4.9MB
Sample260929-tp7nwaba44
SHA256 4152dda339a51e9d0afd25c9512c1a7f0bb92f6fda00d3bd58f3686016942cda
MD5 f4456279fc97151b238b651d7986add3
SHA1 3d9655df05a162465e00b5598911769fccd23d7d
SHA512 fb0d69ecc7be357248ceb64f45f83eb48f5fd050a73bd3bc876a06324fb54663b764820d526f61a94051be804437025efc33609af56c8932c6af3ca58465ad38
SSDEEP 98304:pnwRJj3gFEGyD+xVc9z6Fb8nbpRdOxMyUkmmteFCyX4Gwug:pnEj3UFyGVcWIbpR4aysU
TLSH
T18C361252FBE59E9FCC7681361BCB273112229E16C693E34B5A58336D2D732D81E48BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ludomiza.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ludomiza.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ludomiza.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ludomiza.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ludomiza.app

com.ludomiza.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4781

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation6709848405954833327tmp

Path /data/data/com.ludomiza.app/files/PersistedInstallation6709848405954833327tmp
Size 565B
SHA256 fa2b4247298192fe0fab20024065970bcd223e58f5baaf815b354a5a623e01ca
MD5 664cfbde2de51bcca57a37a51dd00cbd
SHA1 e588dc9c05c35acbfca4890e0ef0e27fc5309056
SHA512 34b5992585d633867baa7cdc033c9e2e4bac37bf6afcd4bf4d1737958812b3d05f7804a85a442b27dc48119aa2d364d99c141eb1ac667579d2c21822b8410ba6
TLSH
T1A1F0265D73704544A987F782C78CBD41084408F3589D11977FD794B9907C4B5F2579CB
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7398100505572281093tmp

Path /data/data/com.ludomiza.app/files/PersistedInstallation7398100505572281093tmp
Size 90B
SHA256 6b210c0ea5226658ab4d938cbbcdf62a154238cec3329ab115f60ff62eec85d0
MD5 29375ef3b4a3d15c028e770d2c30b5a3
SHA1 5780d6721e7ebdfd827d816d8a69b15106f3685a
SHA512 4fe78a726601f5f1cdc1aec6cebaf791d60bc12a979319b5a6f05030b506fc3627f6967efe2385b3a11e138b766c2837f332b5a13c6b6680dfcd19c3e27855de
TLSH
T1A0B01245DA3042818889F2031E8CB1C07D5115410409CB460B08A4B001D12E0A103BEB
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTAyNzMwNjk2NzphbmRyb2lkOmVhNmM1OWRiOTM5ZjlhNTI1OTlmOTI.preferences_pb.tmp

Path /data/data/com.ludomiza.app/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTAyNzMwNjk2NzphbmRyb2lkOmVhNmM1OWRiOTM5ZjlhNTI1OTlmOTI.preferences_pb.tmp
Size 321B
SHA256 cc6363a9111bfacc8d83a5fe3adaca379b2f57c8c883b360bc679645df0bda85
MD5 87fb9fb2e3dbca822e6d1e21edf8360e
SHA1 0821bfbb6c343a6447ff7698f99fa17d7c301383
SHA512 37f9ffadd000256ba5264aa3145557554319f92d6fb51823f182aba4511e24518576d1ee0f326679ad30db2ba621ca3fffabac12e256c5b1140ed5c83551daf4
TLSH
T1ADE02600EAF15DE1192F500C7BA8022C0E2FF3D121B6445921F80080F90E645D2C2F0A
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTAyNzMwNjk2NzphbmRyb2lkOmVhNmM1OWRiOTM5ZjlhNTI1OTlmOTI.preferences_pb.tmp

Path /data/data/com.ludomiza.app/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTAyNzMwNjk2NzphbmRyb2lkOmVhNmM1OWRiOTM5ZjlhNTI1OTlmOTI.preferences_pb.tmp
Size 345B
SHA256 7c6027c4aa5e9af2cbb687e3b687ab10830c3c64219fd4577c50202a17bce580
MD5 0de945849b7696265a5b732d75a9df5d
SHA1 73d399329dac9c62f6bdc923904f41d7d697c64c
SHA512 b390e0d903926916f863346b71602ea0471923ef3e13aba63946dc544baa8bf0eab51bde8d251764f5bd6057d8cb7af3b0cea7a29f4a428dc216de1bada6556f
TLSH
T1B5E0DF10EAE15EE2196F914D7BA8022C0E3FB3D221BA445925E90080B91E645E6C2F1A
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.ludomiza.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 6cecc311b057466f9b83f3fb08294702590fedb7420d1b485d1da477cab1a61b
MD5 2c8e8ed3644cb771fceb2ddf3b426089
SHA1 486714f7ec62c7b95df9bbd04a5139c658b05fe5
SHA512 00a15b1ec0b3b14ac88b5c9ec8dfd82bf18a0cc730b6138ad6b699481f24939152073b9db96323afd81ea0923d1da4752badaebc9c57d1dca31df3b9e6b11f29
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.ludomiza.app/primary.prof
Size 2KB
SHA256 0a8a944200f5894cac2d87515fedf03a2dc5d0d2c687a042a6e43d84e4c8e2b2
MD5 2561aaa8592b5e295b665d66974fc221
SHA1 2a4df50ba811fdc5f592550b56f20540110e3dda
SHA512 a5606e3b458cf189aa1192d1e1c289a9df5ed8e65b35ca8efeeccd36c23ed22eff6f8217cdb1492815e73be36c51455d8484ff378b6fc1920308d3da07adeff1
TLSH
T11F513C5C64154F8D13E72BC1C6EA9460CAC0FD8A3540A54AE588713329E7FBDEF340AE
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads