05d52509f8c27ff6f4d89c516b4f9bc38032c88bc27f467dc4813d5a1fc4a17c | Triage™

Analysis

max time kernel
110s
max time network
155s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
18/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app-release-0.9.1-1787378353.apk
Size 23.9MB
Sample261018-w21gfahv21
SHA256 05d52509f8c27ff6f4d89c516b4f9bc38032c88bc27f467dc4813d5a1fc4a17c
MD5 0f7fa6d81b355e617348058d6a00098f
SHA1 527ab0735a0b40d6f2c74f23b04403672d5db2fa
SHA512 e83269bba08bc669e8d2c33429b3d42174ac422a02b96ed83436da0cd94d8f62eb06ca3410d50bb1466f890c1345c1907a2746686616c5a29207e60ee014a4cd
SSDEEP 393216:bjnU4PRf1bz2rAjQL4XPpbPJ0K6Xo3nrrm5PT:vUIRf1fEAjXfpbPKKn/I7
TLSH
T125479E04E40C560EFEC9E0BC8F884257FB177A565258C2993833520DFDABAD6972D7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.shanhai.roadbook

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.shanhai.roadbook

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.shanhai.roadbook

com.shanhai.roadbook
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4094

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads