bc1672565778acb464295f2af7061f9b6a2ce62fa8da0ffe9469887ee73cdaf2

Analysis

max time kernel
46s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/09/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
shie-hassaikai.apk
Size 5.1MB
Sample260930-plndlsxdjd
SHA256 bc1672565778acb464295f2af7061f9b6a2ce62fa8da0ffe9469887ee73cdaf2
MD5 72aa2feb39c258f44dcc2a94be3e552a
SHA1 e28ff9c27679ed5215ac58378c6b48a4c00ac863
SHA512 2a15617da0d1a7632dcad15f097590bd023a69693361f42f7590fdf7c6ac7d51581d1d201994fdc7e2d077babbed43f5140e0aaea5c73dcbde903b211249ddc7
SSDEEP 49152:YAUgunJ3FwlEpR/qmuvPNeF75GZOtPDTYj4qJchNmMq9qG68aXVM8RQ8A6XUaBEw:ejGZOtPDTYjYhNmMqbqMx8AaBV
TLSH
T13136AF17B22A5C33D28E67F41DFE17A9B3315287A74393492E959C687CC32E1C7E8198
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.shiehassaikai.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.shiehassaikai.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.shiehassaikai.app

com.shiehassaikai.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4808

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.shiehassaikai.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 7f9ad8d6c10703fc302392b29545fd0862efd28b4458033b3607aecdaa401a5c
MD5 06abe5205ac5011ed7065e8e69fb6809
SHA1 b1d62d21f7d7ef2fc3a75a6b67510949c474f587
SHA512 5bfc6403f175c94a8cf416387f41d7da63861f30f7f93ea2a4fbf342af9e0f2fa664455cfa17205eb7320f475549dd105164baf420984e74cfe758fc6333e6bf
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.shiehassaikai.app/primary.prof
Size 217B
SHA256 fdbde679520e4252b123b32e3b043d7df1bba57bcb3d4a68e5c85d5f7c5293ac
MD5 b4b921416bbcd0f4afb48fb29503b52c
SHA1 d77ad1206cc5bac75ff8e14eac9e18aa4078d069
SHA512 c236dd220ca04de976f985deeabe2ecf1f57fa059dd5c941e0c3baebd1942a7c353566c04f0f5e882cd2d2fe508eff8229a79ec95678916e9cd4cc1216ff247d
TLSH
T104D0A99754C8B30082633AE09ABA427B229AE06D1798112033C4306000F071EC456C03
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.shiehassaikai.app/primary.prof
Size 798B
SHA256 8d3adb8d247ff7c8782d3b2266990fb397a740fea7dd35c89c3ad22c1a662e9a
MD5 d44adf9720f8761f8d5dab3327bdf891
SHA1 aebf20ecb700bd2d29c64de61c1a6b64e61d6e29
SHA512 fc5a42dfe4844161eb411c703c00c4b1e762a15ab61dab51d467ede42d266b1c60a0dfee608a4a88461b77ea4930760a59292299846fafa59e6a6b17b0d8f8ea
TLSH
T1BD0146556760D44BBB128268129BB0E3D28D5555C30927634C9D3B1051CE27CD98D33A
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads