4787556fa782e37f5f594dce44e4917d5154141e12d17a027afdff94234b82a2

Analysis

max time kernel
121s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/10/2026, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ceri388_2_1_6.apk
Size 4.3MB
Sample261007-pjq2qaav7j
SHA256 4787556fa782e37f5f594dce44e4917d5154141e12d17a027afdff94234b82a2
MD5 daa7ea88a556cf75c2a0b91a7df61212
SHA1 42ee9b41d5c536941c406621550ce498d4763b51
SHA512 b08de4c76eb7cb29f663fce36749da1ea0f58ab4461e78b8f645f8a27ae81c24def7f50aa61eec7e5f2d8a1b44c2aeadd9e606f3dc75cd6f025e4ee59ffb1030
SSDEEP 98304:eJl+lyOndjcxaQEF+rQw7ttRwUPYN2NnTPMfKdbzFkxnbPc/f/mGDTpO:eJQlBZQEF+hFGN2NnLMiZzWxnLcdD8
TLSH
T165261253F769AA2FC8B380361AEA433112568E56C743EB0B6458376C387BBD80F957D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ozzo.ceri388

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ozzo.ceri388

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ozzo.ceri388

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ozzo.ceri388

com.ozzo.ceri388
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4752

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.ozzo.ceri388/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.ozzo.ceri388/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 74dd2e83b6e8cc57b1f370a2c5d999c5ecf1be984e991e0a2b6f3821e4d9a67a
MD5 ae68ee9edda9bea81f9dc285266369a7
SHA1 41292e2dbff48ee65e413e3627c202a62a8b490b
SHA512 ed9ef865b041009d65b6ed38bd76d226b5a5275422ec73c739aa8c610768ca84f8b48a5d1dceb15d2e1be5ceeb874645d6d0629285ba4b644aa3d38031b615ac
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.ozzo.ceri388/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.ceri388/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 3f1bd34920037086a22458b07704f7340a0cacedd432e69d6021cc2547a97b4d
MD5 58268903846fd375dee9a29380eea985
SHA1 c19c24d0a2a8d5480450fb5ec12e637742bb6c06
SHA512 01631a02964ab21835f099a32eaac66374bd2fb843b9bf7af0bae1bfd986278f41df8414294d70542bb19f07fd7ceb72f15e87a5af16e4ed2b2b8b4d757225bc
SSDEEP 6:KmkWwosWLRg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/Pm+s51m+TOw2:KxJoskqzdeWRmBEyPbP/P651XTOw2
TLSH
T12072C2A59B800553C13E437E50C7C3400E23721F53AAC74B2585B6616C0A3C8A568F08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.ozzo.ceri388/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 aebafd29e3326a3e70f7d1286bca9d82a2fdc3f859ccbc4a90c06d37e4011958
MD5 86828954641349902aa11ef15ff214b1
SHA1 8619ca181bbf1410dd78836014804978b7a69e85
SHA512 c7e3916d654e0859c082d3f5e1b371ae2894539f5b975893b3c15fcbe4cf2cfaf9fb506028d93f75855134cec1bc1603e670f0a8e95199ee165ae9da54604258
SSDEEP 96:Mf/UtWrDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:Pt2ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T1A7B3409E0F592500C0AE64B0D5D00FE1793F912EC397E3E1659161B5ADCA920DE29DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads