01a2bb200eb09a09dc3ea86a9869bec1b45fca2544bc7d4eb33a35dd25bc690d

Analysis

max time kernel
22s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/10/2026, 12:19

Target
ChatAI.apk
Size 9.0MB
Sample261002-pg6pdsts4p
SHA256 01a2bb200eb09a09dc3ea86a9869bec1b45fca2544bc7d4eb33a35dd25bc690d
MD5 c61cfedbd17b50dcdce2b00e86fa5a7c
SHA1 04582e7f26dc5f789b5358f1547d2c2b223f61a6
SHA512 7e66933b48b43fb35f04c04c746c9320a877d6d28ba7d13f25d2f5a4021311ab8eb807c64a0130ab9f7523f804c110f628ecd3d50093a4e70ad55d55059f1603
SSDEEP 196608:/lT3h+c/ORzpuCPU7t4rxKjTG49D/nz5DntlBM8uQqcbO:/l1+coz4IUh4r0jTftlBM8ycbO
TLSH
T137A612308E5C1822C436BB7594EF1B9373BC93060301E63F27BCA6693DD7B969A42975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.nqrta.vpdiyvvfs

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Checks the presence of a debugger
defense_evasion