6ca26a8afdaa1d137c95b85e4ee310c6cdebdb6011ba5fba4bb73d945f123522

Analysis

max time kernel
25s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
01/10/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Indo78_2_1_6.apk
Size 4.3MB
Sample261001-pm2mmaxtfx
SHA256 6ca26a8afdaa1d137c95b85e4ee310c6cdebdb6011ba5fba4bb73d945f123522
MD5 f200a406bc85abc4c835c7c1829c9e98
SHA1 e18b20f1e4475f9aa8d57d3d9dc25e195b82808f
SHA512 86d465c3ff81cb9f103046f60d117f07b3abaeae228fc81003063b953560d29b5899e555fe399116a466cf3103292a9f8d2f6692c336daf7714b875d4985bd0e
SSDEEP 98304:ECOqnEY/WtDuvtLHMGwhXX/KOnfT7A/kooKe1U8XML20OYgbPcBGCV/m8DTSZ/:EUWhct5whHScffA/he1BXMibYgLcUCVC
TLSH
T1B7261293F769AA2FCCB784321E9A133112528E26C753EB076468376D3C7BAD80E557C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ozzo.Indo78

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ozzo.Indo78

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ozzo.Indo78

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ozzo.Indo78

com.ozzo.Indo78
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4736

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.ozzo.Indo78/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.ozzo.Indo78/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 71ab4c1670e276c9ea82de999d44515fec544e40f1523c8bb760cc802f5b23a5
MD5 2e62b0901774ef9f566b898668eec536
SHA1 0d0f9f65d8c59842f370670c9cc3094c5bbd4b6b
SHA512 aa81ba59f866a32e4bc83b47b6dce6877735e114e0e9e7dd147ce8c142101867fd15ba4fe72f99e6c54c596582b71b583482370126c7e4816eb703a6088ba521
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.ozzo.Indo78/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.Indo78/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 6dff9942f36f8678b51fa47d6652083f467c8fb39b0965133393af62382cb269
MD5 4c663eb5b7e13ecc417985af79861a21
SHA1 f129accb073f26a01fe4bfd9505f381c8cd3188e
SHA512 883e2898d8d37dbea88f15c287f4c707d95726985a781d5e40dc3af6c77e4647a1b3b458350f2ffed40a32fe637ec26d67a3a7f8f2955d9606f7a2e08d233ede
SSDEEP 6:K2p+DBxJ9FZde/kPlOERX4PBX4ogLugMBX4suuK+/H1+liOw2:Kk+HzdeWRmBEyPbP/UliOw2
TLSH
T171728CE473A00552CD16B232588883492D68E3195212DF4F568106B4BED22A8A950E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.Indo78/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 618cf8fd10f50866d1f1354bfea55337999a098d1b0c93957283fb5b094c62f8
MD5 dac0b4ff9b3ecb56e8310e13c492466e
SHA1 648b322b08058b2c9ca2a9556db32b663484c962
SHA512 1de8cbbac5b31a99fd91acbd2d3844f25b5a78a6e0f4b3931d11b57fbfe80cf08f4ba71eba0a11fd5981a0affbf8d5feb1650bb8f256699b9c11500700f83e0d
SSDEEP 96:AMyEko9GWw41DP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:66GKndjnHt9S/f8JzSV+6D86T0ED
TLSH
T173B322CD1F392500C8A9B4B095D00FA1793E832E8393F7D5659101B5BED2931DE29CF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads