6d2df295ffac842c3b1a53baf40a568773f1587d932354a25c1e9ffed5c6103c

Analysis

max time kernel
21s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
22/10/2026, 18:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sagar-club-1.0.0.apk
Size 6.9MB
Sample261022-w6l5lsbc64
SHA256 6d2df295ffac842c3b1a53baf40a568773f1587d932354a25c1e9ffed5c6103c
MD5 7c76f844eb72b66a96acede5d14e6bd0
SHA1 38e555ed24fb160991de52bfff439678f10dbfb3
SHA512 1e691136f70d28c71d1c64b93a14059873fbb3acc5a8a1e4e3a46f8346e511a55dd8156f6937edefb9b3f4e303ceff45908d18a3d9e6035c422f0c95ff10f018
SSDEEP 98304:peId7TLh9hY57A/lSp9Mqs9c1PgxcsrRBQn/l2O2A8rt192L0MZ5eFg/dqwbsOHM:pv7ZaXp9Sqgxc22nNsX2J5yWqIsMXpa
TLSH
T1A5762282F7A95E5FC87781360ACB6732225A5E16C393D30789187B6E3C776E80E447C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.sagar.colors

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.sagar.colors

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.sagar.colors

app.sagar.colors
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4778

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/app.sagar.colors/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 876f8ca3cd3bf24a693850914ca2966754cbccc92cc4245297d9bb87e48ccb2e
MD5 9ce18593e6c53aa5308643ef61772846
SHA1 9ac4dad37d08c68705c9ae8d65aed0f1d434cad9
SHA512 b541d41ff1a77e7824839938353b253dbe576de728d340b3d11b3cb0e3d7a54e47f4150548111695655ffed862d3e160eaa468047ace5bbe02f966fbae2b6551
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/app.sagar.colors/primary.prof
Size 2KB
SHA256 0ff8cda996dff5bb32b3b02e887c6fb87efff637a3e2204c8d52e56fba45c5fc
MD5 644d6e16082317c185db6f299de6cfca
SHA1 fab13ab3b9acde578352342c55d24589d923aa9b
SHA512 0e0e538ab6a55e6a46232bc7b291f5cbe2c16add0954819a25278e9c959c20d99871452cb0bddc72f9294a0fb638e10a5762446442f949f912bc2add3cc46d1b
TLSH
T1D5514D6467D62236465CFFC6C022707F832BEF947A8A6C084361F50FB6C08E10599E7E
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads