cf0ed6efb5091e26ac38946f12c41cd7a44ec8cad50cf642481a4da77803335f

Analysis

max time kernel
16s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
satoshi-millionaire.apk
Size 4.9MB
Sample261003-w2n4eavy5r
SHA256 cf0ed6efb5091e26ac38946f12c41cd7a44ec8cad50cf642481a4da77803335f
MD5 5319538ea028a26805f5fc9cca66d37d
SHA1 d79eaf8e785af9d2c26aaede922f0fcd40fc3416
SHA512 645ecc46acdaf79e8016fcf026eb38961da2d1c158f78a67f69ee64bfb6e0d7463be77a7cd19b6be0a7c6a18f7ad21264f6ed3e16ae87aa421bf794b588180aa
SSDEEP 98304:CxS16D7pSWvY223sB+JTRfFSepWFXRpo8ZtWfbAc/kZa48GtAJlXYXf4:0KWvY223s0hBFSaWpzoSWfbAcbGt4WA
TLSH
T1B9362282E7E52D6FCCB745360F9B027116129D03CA93EB0B9A98362C6C7B6D84F55BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	io.thebitcoindigest.satoshimillionaire

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	io.thebitcoindigest.satoshimillionaire

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	io.thebitcoindigest.satoshimillionaire

io.thebitcoindigest.satoshimillionaire
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4811

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/io.thebitcoindigest.satoshimillionaire/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a84a0621132cf0e8ea1a13c87258172224973303cdcb25b7b121f864c1483ab5
MD5 d3ccb6662e51a9dc324da537be5a0ee1
SHA1 8ae50178315370d5dd260e1ea37313435bd51668
SHA512 0fc8f462d24eaa062a69184cbbb0034f514145519571fce7186418eb16e14bc994f59b537b254bcbae9fe634c4bb1cb0810328a0550dd3e4534bf87d281f1ff1
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/io.thebitcoindigest.satoshimillionaire/primary.prof
Size 2KB
SHA256 71083582b7ca167684177e559083d4e4826610d66297e79d5d70c2dc41aa14ba
MD5 6749afadc9ea39efcc6eed3fd5487f5d
SHA1 bb01dfef0d78391975656d7f9acb9fa6144abda3
SHA512 5b27e4676606c6b8cf6033b4836e45727f5cf92451dcc1d8d55804a5e7f2de863731cbee345ef20437cc6a967e16beb604ef43fff22308bca2cfd3913cb6fd25
TLSH
T1A7513AD747108A01C47BF39F8DD7A72127084841C551FB2A08AE7C49299483FE379BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads