a1988ae3534058def0cb2f8a67366f834da5f01f25689376bf9fec1d166b0d86

Analysis

max time kernel
47s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
15/10/2026, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_HEUR.Backdoor.AndroidOS.Maxit.a.apk
Size 281KB
Sample261015-pcafdsat2p
SHA256 a1988ae3534058def0cb2f8a67366f834da5f01f25689376bf9fec1d166b0d86
MD5 124b2a55949896e6dbd390f0d602b5b3
SHA1 7364200f41d390be872a3b1469a5656df1f07ceb
SHA512 f4a98bca0f5b9832a3c32a68e1fbbed2b7d0e4dacfd2273b5287331b5238a57c067ce055dc3b93c51ad001bcb8bcf8f1cf71e5eecb3a8d2724613d056cee3e49
SSDEEP 6144:IrBmIzShcdeIvS8XMIMS3vzV8h0q4/my3OvzjGJJOq+M4aqaLs:I3zLPvHMW8Wq4/t3Vj4TZ
TLSH
T1BD5412B0CD89FC6AD7699E76970523138E6946F4AD13FBBA004379E04EFAC80D605F91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.mxmobile.mxgames113in1

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mxmobile.mxgames113in1

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mxmobile.mxgames113in1

com.mxmobile.mxgames113in1
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4875

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads