dba00e7d2377fdfcfb18c789a3b2f86532ff76a55c4532cd404c6a3b0871bbad | Triage™

Analysis

max time kernel
145s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/09/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
xe8.apk
Size 12.4MB
Sample260930-phktbavtez
SHA256 dba00e7d2377fdfcfb18c789a3b2f86532ff76a55c4532cd404c6a3b0871bbad
MD5 342475e8f9f482b28781b3a2d4ea1820
SHA1 9d15fd2c23809cb6919a48ce6dcd52e746a95354
SHA512 826e6d6931f7fea016a048cf7b4b897fc77d5ba58c8d3def6756dde365620284c7a12254e3c0d9cc8fc67cc6b515a121601154ba21aaa82bbf3e20300c96ddb7
SSDEEP 196608:kAGmnmjtiZ73hG7HSwsi2vANPFfEDFS34q/W/xomc4N0+HLH2:5DnmMRGrPszvANd6kXmomfrW
TLSH
T1C1D6E023CB095595F1F335F109D96B92BD812C308117AFEBD72C367A60376F09A2939A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.liligames.xe8

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.liligames.xe8

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.liligames.xe8

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.liligames.xe8

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.liligames.xe8

com.liligames.xe8
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4888

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 98200e826eaee5abc33d03d55374d2b1f465fc0f72964090d912dc314408916e
MD5 f775c2e70418348bb28922d3ee35786f
SHA1 b887cd4f6c56e53e861d60c12008f8a923a11fde
SHA512 140a9f15b30f20769f65da1beb2575a2320eb3903f94299b06605ed4470d11eed468ae159384b746f44cfb3d2e3c36ec35cb0542ddacc088b4909578084c9d7e
SSDEEP 12:TLiEq9zmzrfRmBEyPbP/3p/0RT/VM/QCQ:TL4pmzr0GSP/3SRT/ae
TLSH
T1437255CDBA209607E277477AA4CAD3D23C24316A0363CA473E400B2C5E8664590A2F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 20f15740384a43844c9e7615e1f0a3bff6fed9b6df3ca3bca1aee9e0a98baf59
MD5 d3c9eed3ad53d3eb34357e18e91c180f
SHA1 8df01a267b93d68b7f98191cbe549b07ad033feb
SHA512 9f98edfb942e4a6d2ef9b71db09ff36e79f6de12a802116c797a7334d57b2446f94e97edc8df23593cbd2adcff4d8b07af5e7625885e7a73f9930c660a51f9ed
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hZt1kn+/0Fl6X97WP4p/0RT/VM/QCQ:TLopmzr0GSP/hZtunlFBASRT/ae
TLSH
T1DE72248DBA20D706F277473264CA93D22C3431658723C6167A401B1C5D867815162F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 98b2417e984bd29e8890928b0d21a9cc54d91b860191bbc0f41b97e74cb87ea1
MD5 ba1722d640aae68627ebc72c838f55b4
SHA1 3e5461c912774e3dfb8f58ed38534745c22a8c48
SHA512 babb282a728df3a6b25143411b0dcb5068a8f4569975ef045ebd56ac745fb8a71d2c79fb25a08fa227a93693490fb348b6eaa76c82830733194be1e3b11f17e9
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/QH49blqYFl2/uo0n+/0Fl6X97WP4p/0RT/VM/QCQ:TLYpmzr0GSP/s499FQ8nlFBASRT/ae
TLSH
T16972F499BA24DB0BF27B4B35A4CBE3D23C3431664763C656B9416B2C6D863829272F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 fee93ffca32b3e554aebd318c9c9265e53b6dff628f421f41314bc662a0d84c3
MD5 0e5725006db55f6d55133f753e1385f3
SHA1 8ad66add513eef9c69a205b52d87eac74eadabbd
SHA512 747aa131b3b8ee89022501f90ef7bdfdd0506aa880db79bea7e7b4d668159cccdd7a4facbab77b9306ffd679d8d30d03220d2f1a9b901d04ba1bca93a560e3d4
SSDEEP 24:TL6vpmzr0GSP/ogKabCCbPQX499FQ8nlFBASRT/ae:T2vArSP/oFabCCb4I5pn6iT
TLSH
T144722689B678DA57F2774B3965C6E7C2393431A70727D612BD422B1C2D463914171F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 ad373751b134d06d7aa929627b70db0d05a26932ee2de52952927ff2eea0109c
MD5 5a3e3bd2ed5548e7226904f7b1ebfa26
SHA1 ac29a4a73fc51a8840cb94a3f3eccfd074a9b6b7
SHA512 a90044b1ff8533ebde1d82b7f3f5acbd5841418a5e0de4cab99a84eab6cfe6d8de46015753c1be3dedb939b17116c455e9a34f39e5f2b56110e2609d33b5a405
SSDEEP 6:l9bNFlmls10l/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WAj/:TLUE0lv9zmzrfRmBEyPbP/WAj
TLSH
T19C72C28DDF102607DB7607B2B8C99351BC14622D8336AA872B9504A0FE438499092F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db
Size 16KB
SHA256 580feb3f7ebb402150c51623637cbf32ac54548f964acb85415eccc09535cd09
MD5 fb5ccf9bdf01e989c5d418412bb8ad10
SHA1 af9433b3f42aa5fa6e4161c2f1a8188e5517c61e
SHA512 ecbce89052022cdde7be1ec421c68c029d5e8a7ebe91e5db5b967d7a5c5a2d3ff60e6b5b6458d32429104806394df577a9b003b64ef0bfc72742672120114f69
SSDEEP 12:TLWuEmO9zmzrfRmBEyPbBvOwhk/0RT/VM/QCQ:TLROpmzr0GSNh/RT/ae
TLSH
T10F72558DEB20E207E1774736E8CAE3D23D74316A0363C6077A810B5C5D8674554A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 a156614362d8f01e009cf195472c21d7b459b5c7a77f0f01e44c7ea0e921cc76
MD5 fc7aec2b54452d6c833f61be8fc70eac
SHA1 a5013cd3f90f40b8a6aba73467e5516fa44d3080
SHA512 da2f89ce4fe7b09f27512bb12217970d40cdab72b26d879515e451c7019c431f434c4029d4c12f7589bb941c2549515ea6e02730c7c714f0cdb7687b2ec06e9d
SSDEEP 6:7+/l9pDpNcvg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKyD:7+t3pWqL8EA9zmzrfRmBEyPbDD
TLSH
T1A002728C8F202203C1BB0733B4CF83401C68A22A837BAD132BA50420ED0718890A2FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 a68996c3316f88039cf0461d52adb973b6f2847d1f4dac909e48b2fb6004fb9f
MD5 a9c82369750f2ac308a08e2db9118466
SHA1 e1029fcc8a619430bdf2208c47a19a056a78cd9e
SHA512 d535cd105215331b95df1108ee0dc7906d7f1dc3120b8accacd917107b808a1a72ee2ba8a55795cb96286e46db25c597af3475fa76385646733e4dbfb78a11a8
SSDEEP 24:7+tdKabCCbPQX499FQ8nlFBMqL09pmzr0GSp:7MQabCCb4I5pnWqsArSp
TLSH
T103024788B6A9EA13F27B4B3960C7D7C1393931665727E6137A422B1C6C473918071F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 f8c0e8e2545f2471b8e4620b37e3732be23e1d6881c1d41ce2884ea2c08b0f8a
MD5 9d5f58a1b9c467945797bf84d0cacddc
SHA1 40c6af35486f343cf0d25e1a1003014edfe8ff26
SHA512 e08385ae3e6bc36f1d258d7724b9091af3e9c033cc0bed0c7dbc533e0e5282ac6a07b63cb49467a91d1ea2eb0cd311dd65bed7542b739c95d21e99f8502437bd
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 3fe171659c24d8ce6ad4870d7cb2b376fb6eb76861703517e97fd9fdeb7f1610
MD5 b7f795badaf7a0b7146ad485e0f44237
SHA1 41d0ff1ba570a75a11395a2b237ccf68600764de
SHA512 50b51aea9f6abbcf2ce5ac2ee798767660ba8ce1d8ffe5acc33e0046dfda7784a8d8fd33d0f20e0f6bef4d4eba5d4125d726b44fe2d5109abb6d596e80cc4565
SSDEEP 6:7+/l91kn1Fg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKu9j:7+t4qLiuWdYRmBEyPbfB
TLSH
T1D302228867820932C829967B90D783A00D00A7288161CB6B26910CA42C0B4CCA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 e0ba94c69d1a03c6ba26d07c6c413409a2ca5738ada3cf958de47529db18d74b
MD5 6bb52745ab8daf2b0467c53d82650d3c
SHA1 f3368a12ba97a81b91c85d52660f0e53f6a89bab
SHA512 d86965cfc2f9ff85ef2459a9f639ff975a176f6ea843dca64662e8640c8b5e83641708373411670af37b22443bbb755ea6ecc1d5cb8edd8ff61e49b3e6248465
SSDEEP 6:7+/l8gPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKKVn:7+t84qLJdeWRmBEyPbpVn
TLSH
T1D891C089A3400C03C12A1BFBA0C483400F10A7289333CF47269109547C4B6CCE4A0E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.liligames.xe8/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 e7aa5b185b98000d672fdfc4be26f1c42b74bcd58d134a1cf234eb4694989711
MD5 c95ae92eabdf8b187b1c1b6de389d539
SHA1 cd4c9b2e3a173f08df0a3690095835a5ea143cf2
SHA512 99689f44a4d7251fb9c87397a7def65ec6c347cb19120c9e2d7fedba57f7cc7acfaf488baf936f83eb36297f74ea5fbadcc69892fea72670c18364acfac3938e
SSDEEP 6:7+/l9nq/mHPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuK8fnys//W:7+tFRqLmqKRmBEyPb1XW
TLSH
T1A102229A63800D03C02A1677E0C883402E00A324C121CF076AA108A46C464CDA8A0D50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation6327378545401194334tmp

Path /data/data/com.liligames.xe8/files/PersistedInstallation6327378545401194334tmp
Size 569B
SHA256 ec1d8c9b7da0f0c7447c21baa8250ab3c80370a6f8d26fcd3fe10b432fd62057
MD5 2b8686f2b0e20fa967dc851dbe8a2d0d
SHA1 11ac1131ea03c551b01cd2e082c0a81314aec873
SHA512 3021fa141febe5d83f8f46bfdc7b4b28ea0c4c5a441341685ffb4e4aa5e1a21f6da9acce5eae41efbbb560707a3e4cb97c1234ff4e0be59db4e53080c60a3686
TLSH
T128F0E1286650462AFB29604B101DFEB58D5805F3DAED15F8FA8B085019AA669125A049
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation9050104445170426907tmp

Path /data/data/com.liligames.xe8/files/PersistedInstallation9050104445170426907tmp
Size 90B
SHA256 f7654f378ee43128c5a0e9a0d94ddfbcf77f1795ad441adfeacac76044b70277
MD5 9495b36a5cb3c13b7f41a49834a3c3db
SHA1 ffc3047acd97506e558e6fb121d14aa3640ffb2e
SHA512 c752a11192af08ecb404ae2da20ae008e9211f81be1e991f27e15f13b079e9f5e265c3d903ee9eced0814c0fab6f8d72775e224f24b74e7ce29d8cd86d766766
TLSH
T12AB0120456304341C5EAB60A5D8D91402E512C41C48B8E6C0B5ED04000833E88503994
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.liligames.xe8/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9d7f144b096d982d56512aec95e80077588b0ec5eace075569886289cbdf5da7
MD5 7de0b74e4f3af261448a989f7f6a9aa1
SHA1 c359c001ee358affa25b57348d54b05469ebd30f
SHA512 39c4bccbdbf1af5c5d9723f51173dccb9b06dfe53ea870dd9d24bf1503d8a4a79afdab3d15f51a3df7ca3d16e6806b05b634bdc862607dcd2d733e83b8b189fb
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.liligames.xe8/primary.prof
Size 2KB
SHA256 7023351b45158cb4fd617ac70f324b20c208a2c215bec811d51e2ea462a6b14c
MD5 12988580931fd37ff06c9e5f60bf9e54
SHA1 0e573faf7d7c242c1833d4fb74696e9383f9a010
SHA512 1ce76d047cc6655e047c107427e562976759ffce15d0bcd8c2ec8b0a598621251a9057ab3167b80497ffcf958c64a17eb74190c30ad633b05057f55043b78b1c
TLSH
T117515C1D493501473F7E46853AA058DAB6A43E31BECC78C674C41894FC91DDA7D8A154
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.liligames.xe8/primary.prof
Size 7KB
SHA256 459aca5f08838525983a2ffc941dee4465a4085b1132d0c7943c9e1b04565870
MD5 1b776b159078af0baa12295727900e45
SHA1 3d46b78514af90fd63bfdb9600ed4802d691101d
SHA512 fdae4400ef646109b3ccef3b06f180e607611aa4778c0deee0ec3a2f670959daf7f0803510fb4754f6a0be372392d04fff946fe86680926de8be9d3f1b8c9fc8
SSDEEP 192:22PDME3jJzxFOYkRS0/rQn95tQ9Wx6HxfrEwV2Y1P4MybF7h:22vLrkRNy95tKs6HxrEw54l9h
TLSH
T1E9E19FB3BC851BCE4BE43D2268A9296E079BB01080504F19DAF1FDA793C795B612165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download