Analysis
- max time kernel
46s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/09/2026, 12:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
shie-hassaikai.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
shie-hassaikai.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
shie-hassaikai.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target shie-hassaikai.apk
- Size 5.1MB
- Sample260930-plndlsxdjd
- SHA256 bc1672565778acb464295f2af7061f9b6a2ce62fa8da0ffe9469887ee73cdaf2
- MD5 72aa2feb39c258f44dcc2a94be3e552a
- SHA1 e28ff9c27679ed5215ac58378c6b48a4c00ac863
- SHA512 2a15617da0d1a7632dcad15f097590bd023a69693361f42f7590fdf7c6ac7d51581d1d201994fdc7e2d077babbed43f5140e0aaea5c73dcbde903b211249ddc7
- SSDEEP 49152:YAUgunJ3FwlEpR/qmuvPNeF75GZOtPDTYj4qJchNmMq9qG68aXVM8RQ8A6XUaBEw:ejGZOtPDTYjYhNmMqbqMx8AaBV
- TLSH T13136AF17B22A5C33D28E67F41DFE17A9B3315287A74393492E959C687CC32E1C7E8198
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.shiehassaikai.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.shiehassaikai.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.shiehassaikai.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.shiehassaikai.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.shiehassaikai.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.shiehassaikai.app/files/profileInstalled
- Size 24B
- SHA256 af3232689e5e5e2caa91d2255e7f12c918ce8ddfef150727812b5da4c90c15e7
- MD5 9ac7347c9e0d6dad8b7f01226c7963d1
- SHA1 58e8e91681e3b9c26446833d940e32290175db44
- SHA512 aab833b4d01771b853b3fd939321234f31bec1bc5520b3aa68e2e29a7a7bfef51c78d4679af718bc58ecc424c33f2495e24f8e23b7d4a147928118eecccb0aca
- MD5 SHA1 SHA512
- Path /data/data/com.shiehassaikai.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 261b1b4afd85fae0615eca8d6de469c2eb5c26048b004822591342d34f8e37de
- MD5 d9ba49379881e8a83944b13d6311c0a4
- SHA1 cddcdd005c6c14e040b01c2bc67c65b90143a128
- SHA512 543247d55589bb89b6463cfce128409a580f0e11dd48b04b574218167d343487cebc10e060b0eaa9425ea7fb481bd3effd835534ea22c0e70e82db17e3dc024a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.shiehassaikai.app/primary.prof
- Size 217B
- SHA256 fdbde679520e4252b123b32e3b043d7df1bba57bcb3d4a68e5c85d5f7c5293ac
- MD5 b4b921416bbcd0f4afb48fb29503b52c
- SHA1 d77ad1206cc5bac75ff8e14eac9e18aa4078d069
- SHA512 c236dd220ca04de976f985deeabe2ecf1f57fa059dd5c941e0c3baebd1942a7c353566c04f0f5e882cd2d2fe508eff8229a79ec95678916e9cd4cc1216ff247d
- TLSH T104D0A99754C8B30082633AE09ABA427B229AE06D1798112033C4306000F071EC456C03
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.shiehassaikai.app/primary.prof
- Size 820B
- SHA256 ee4fd0088cf2a3f91795fbaf0d7becf22ca8d9ff14ed73ede54b8681ec365bf4
- MD5 c5737b275d4af0d3da6ce6c6e2575734
- SHA1 9634c40b9ead7bf2a88081d5bcf9048cfc51a349
- SHA512 77ef51d0b6b81fe2637e474a776ef72b9359716e0b0ea87b4c7671b362b034c3ec8cbd799d87b4b0f862d0e55f6f5a2f747a121ed5420616e0be138e40ff64b5
- TLSH T15A0186AE892A76C05A054A132F835C37CB65C444DDDFD4A26014CA8F695524A0D71C02
- MD5 SHA1 SHA512 TLSH