45cf93401c44638a94fc7dd5b75067b0982da2bc93d1e2d4059e5af541fd1182

Analysis

max time kernel
23s
max time network
154s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
17/10/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 32.9MB
Sample261017-wyncpsbw4y
SHA256 45cf93401c44638a94fc7dd5b75067b0982da2bc93d1e2d4059e5af541fd1182
MD5 f68073e17a28db8dece155279decb97a
SHA1 671520f70c5a94e159be50ef5c08c4ea088207df
SHA512 21ecd918a608438f34daa4d89af063171affb17c400e93c5475dd33102c31aae2fa5626d3f67e98b6668faccf28fc217b99b2038d05f0e9e7092b085e8c8da69
SSDEEP 786432:aenLlIOLkkFJxN5JhqmlpxDKFKhCkFrjO2//13jzg:HnpIE7z5Jhqmlz1P1O2/Zng
TLSH
T116773396B3A1483FFC3718757B5B0561C21A6E476662D3D7B4A8B6B834372C04F84BE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.niceshop.seller

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.niceshop.seller

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.niceshop.seller

com.niceshop.seller
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4911

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.niceshop.seller/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 01ae6222e17b1d3f4d7371c9a2de336396a5ba2f2de91324c8d0e193009a4a35
MD5 56ae8da3d26f5512e90469a73c806931
SHA1 6f45de040309db31b4395e325fe10891a5e61e16
SHA512 b330c8261c84aa1b640d1d11d738d9625a50653e4e9c246a2ca4cdb5eb1a6d3b505c4eb1b195f27d1ef15d84c7845503f15b6b090242eb8fede4c726081c8a35
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.niceshop.seller/primary.prof
Size 2KB
SHA256 7251de64ff4ae621a47d08b05d17b9bf298218a1891996e263a8a88214334007
MD5 ba3083bcc32c6511fe2e9c5de5250de8
SHA1 0ffe61024f2bf4b07cf854b4a1422d2c862adc01
SHA512 2ddfd713d4c50e379fb8d31099ee55d3ce45cc28e025b19ebfab9a8753ecbb35acd20b792f436a5ff5c9a1297e49e9f7d2bcfe8761c32634f827163a134aeb2a
TLSH
T1F041FACA0A6D264D9117817CBAD84770697EB0DCCD3B0126B477050EADB952063E1712
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads