a3da040aab40b054014f57bd68987c03b451344d5d00d8dc68dbc7af8af0e98e

Analysis

max time kernel
72s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/10/2026, 07:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3da040aab40b054014f57bd68987c03b451344d5d00d8dc68dbc7af8af0e98e.bin.apk
Size 2.9MB
Sample261003-hz3bcsvve1
SHA256 a3da040aab40b054014f57bd68987c03b451344d5d00d8dc68dbc7af8af0e98e
MD5 8d116b7320e608884fe7a046e21e6ba7
SHA1 d38bc827489fb8de7dd8f71d335366ed4501cdef
SHA512 5f1655b6a8a161e971f88a7def5beea27a0a9b30bb0cbca7a17192c5983f3af3e909382dc062236971296795d334ed401b2b21332dc49fef55b0a7950db59565
SSDEEP 49152:tJN9K3EB6WJ5POcE4rFg0qqyEN2f7prlWo/KrsDI3DY06TD7Hmy1:3N9WS+4Z8Qo/KrsDIzBAD7D1
TLSH
T150E57D87F784A95EC0F743B689755365510B4C26CB83DBC39E14723C28BB6E02E5ABD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.bytefrontier.partner.a1win

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.bytefrontier.partner.a1win

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.bytefrontier.partner.a1win

com.bytefrontier.partner.a1win
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4832

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.bytefrontier.partner.a1win/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 de5d96baef629dada3114e7df9843aceeb2f96893b5b1c853c7ddbdf57bebf5b
MD5 1020e4f7b656c3715b02a1b02f58caf1
SHA1 6e33d88e17ec54d330f9db01b43ecdb654d140e4
SHA512 a345ac2bc099d22ec97b3c98722f113460e091e545e375f821bbd935b4a413b7959bd09f32759cc4bbf3fb53179cd29b10789f48efdb38ab7d9ff14ee9855495
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.bytefrontier.partner.a1win/primary.prof
Size 3KB
SHA256 7c3b935567576e486ddbffee418fd4d2d642c15532c06d95b89e0afe9e9864e4
MD5 9c6c580196e9625fe3350a5f855851bd
SHA1 fc8f66b53ec31ee931d2a076f4a94b2df496e797
SHA512 8b2b204349210ebe29a0f45142df89953236d3bc5e40ef48665ceb21baed8d2b102dde3cb65dfc0704e116300bd508f162e86d3b731270a2ac505d29831bdbb0
TLSH
T12C818DAF3CFC0BC13EA41E6572705A21C0DBF6011791F35E680C0B49BD926B16D2E1E2
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.bytefrontier.partner.a1win/primary.prof
Size 4KB
SHA256 f050e81dbdc22f9bef27485695f3592f8ff65ce9381ab6c2b1e110c4aec5fc7d
MD5 4fc04a90d840476a04d52d2fd00bd7da
SHA1 9a3f8067911d7781cbfd2183a4cad12528d0de81
SHA512 196718e6a98f1c7a87f54856182dc986a3d281c948ae4f6e67d63213304b9c4cec8ad8f7c5a2fd9af4242c38df7fac091079777d2d6d25d366fcaaf782d15242
SSDEEP 96:9G1DIJt2n5gKU/WMmR2OpHsR0uSsQ5tQBfk0jyl:9G1Da25gZmxHsR0uS/Qm0jyl
TLSH
T130917DB682497802F85E1FE8646B3853196D9BF638A20FEB48BC1998C194DC4F590E82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads