90dd7625e63780fd58c03ac2606cedd4a1679fb32235f816ce58674b35aa49c9

Resubmissions

30/09/2026, 15:01

30/09/2026, 06:01

max time kernel
144s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/09/2026, 15:01

Target
Luch (1).apk
Size 12.0MB
Sample260930-sd2g2sxang
SHA256 90dd7625e63780fd58c03ac2606cedd4a1679fb32235f816ce58674b35aa49c9
MD5 5e6336c9d85eb453a2365f906fc06aca
SHA1 cb215d235db852321a648dc0de2bcf158d0a5c42
SHA512 10759e27b79b08ab12a8a53296f5f197318ac24c99e0ad540af8fa2664699bb4ddc8219baa1a54273aa9dc93f8b70b08fc934d30aa819fe8fe4a5b735b492cb0
SSDEEP 196608:2WFWAuvMzBGk8rReeT+wdSdnnRXSD4wRh5OyiFNMyG1C/bxRd:dPQDp+nngUwRr8iN0zJ
TLSH
T13CC612A25E855926D87E0A3214E7CBD333387E959B0282CBC1EB71A87FB36E14F41751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.stby.rsceshdyu

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.stby.rsceshdyu

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.stby.rsceshdyu