9db109fd3f0fa074e3f72d8f368fe200c226f1f7c28b722d95bbdbbddd95bc70 | Triage™

Resubmissions

06/10/2026, 15:06

261006-sgw2qshz817

06/10/2026, 12:19

261006-phl2daa16m7

Analysis

max time kernel
25s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/10/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CodeChat.apk
Size 20KB
Sample261006-phl2daa16m
SHA256 9db109fd3f0fa074e3f72d8f368fe200c226f1f7c28b722d95bbdbbddd95bc70
MD5 a68b04ed20bd95b5239fafdd7d4fcda1
SHA1 275bc7adccd6171bc3b87ab1c4ade30d0d37954e
SHA512 518494f061f9961397eb714d33823e8137cc43cf01c3c4997746a8bc93f8b676f1f43fff91399fbcf16d8cb64c6db45d67cfdb8b0c20cefb9f70984edf1dd5d6
SSDEEP 384:pZCHxhWQ6PmPlRftSCzHj1+VZYLKTYuNvQHvUXZ0UgvUXPeUck:pIhp6P4RlxzDofYLHup
TLSH
T170A29D67ABC47C1BCAB38731821047377320E6A5DA085A9B57401548BF9EA931FC49CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.codechat.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.codechat.app

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.codechat.app

com.codechat.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4777

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads