8e9d3305943f12d43ff885582f64e2ca763b9fd75fe108485daf303ce9beae82

Resubmissions

27/10/2026, 22:42

261027-2mqlksgv5t7

27/10/2026, 22:33

261027-2gpr4aef347

Analysis

max time kernel
374s
max time network
790s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
27/10/2026, 22:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Teaching_Feeling_v.5.0.apk
Size 519.1MB
Sample261027-2gpr4aef34
SHA256 8e9d3305943f12d43ff885582f64e2ca763b9fd75fe108485daf303ce9beae82
MD5 76e6e85a7b5395cfe324174f49e49542
SHA1 000f465f32a1050a4a90a7639cd219226640a937
SHA512 dcd3b94d59beb5223cf44aa91248438735a88a452586edf12cef57bcdd78516abbc5e8cb8d8e8e729aa8366c0e58571d3c4511bd905beca1e9d2629709f4b045
SSDEEP 6291456:gzvrdJGdTkjbKpLQ5l59QQNmMYi3NvEXzWW:m6mjtH9OMjRC6W
TLSH
T11A49F14CAA216804D70C72786AED50A356BB5F8B4D74958C7E8E8C231F221BCCF5D5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.himikos.hentai.game.teachingfeeling.dev

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.himikos.hentai.game.teachingfeeling.dev

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.himikos.hentai.game.teachingfeeling.dev

com.himikos.hentai.game.teachingfeeling.dev
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4726

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

TeachingFeeling_sf.sav

Path /storage/emulated/0/Android/obb/com.himikos.hentai.game.teachingfeeling.dev/TeachingFeeling_sf.sav
Size 326B
SHA256 ba688817407b6ee99224a70d30ff6cbe89054a7e455105b97c3c5dd3bea58fd7
MD5 c1d1a45bf2a3b1b58ef22ae910adddbb
SHA1 e2ddfd7f490bfcd65291a03ed6da5d2acc51cd53
SHA512 2787e0fe9faa3b7498d5fc258c57aa3ae1adec248a6dda1e671846e250c76ca08f7b76112b126fb0cb0522f8c791436a07db055448dd88c6a1516bd459808a3f
TLSH
T1EAE012177A763945245CB0B1D25D7D5D0F867E73BBE4372108E5B04572012C6277305B
MD5 SHA1 SHA512 TLSH

Submit Download

TeachingFeeling_sf.sav

Path /storage/emulated/0/Android/obb/com.himikos.hentai.game.teachingfeeling.dev/TeachingFeeling_sf.sav
Size 356B
SHA256 e86d1b994693c3787a9a5710dd74366ec4bf14d089eff0385d585c3dc34c21e5
MD5 a831a0fd392e77389d38bdadbda215a8
SHA1 740e542933b65e892536c4bdec2b6dfc2efc4366
SHA512 e7adb9d6de2304e0a96f250d8d6863df9333084d68c6a9900269441d6253bba8f95f772c117105fc3d79f0ab4e0cf1313b920ef4aa6de0f8c56965d62c198b1e
TLSH
T195E08C137A763846206CB0B0D65DBD5D0F823EA3FEE0372008F5B04572102C2277305B
MD5 SHA1 SHA512 TLSH

Submit Download

TeachingFeeling_sf.sav

Path /storage/emulated/0/Android/obb/com.himikos.hentai.game.teachingfeeling.dev/TeachingFeeling_sf.sav
Size 397B
SHA256 2d71aa26937d16866244b5e08601443a23b954eb0d783171860d3c9dad80322f
MD5 0f924d47e324bc0a92ccb6cbcb34cfab
SHA1 a67f5a11ea3dcda10f7891c1ca3c3de5b1ab21f6
SHA512 edf8e9f4d70f183c14420823887079be138089820cb96006f9457e73cf5600eff2e39c2b4a0b90c2728f08cd7da0db6c1f40703913f1cf635e3fac106a576b1b
TLSH
T1D0E0DF137A7628462068B0B0D25EBD2C0F813EA3FEE0332008F1B04572102D2277305B
MD5 SHA1 SHA512 TLSH

Submit Download

TeachingFeeling_sf.sav

Path /storage/emulated/0/Android/obb/com.himikos.hentai.game.teachingfeeling.dev/TeachingFeeling_sf.sav
Size 541B
SHA256 2f38b5a2b2dc049785cf6818c4f2fa4b9d549b0526ff0bd21f5f93b0f53806d8
MD5 af8e20ed3c85d5c6be992450734d229e
SHA1 ade892f6ff925345aef33421c8b7323bc3311bad
SHA512 05aa5b0ec6bff787745e27672a56986d2df10c4724d2ca103b7565325a7fcd3ca010f542a8ad4699409c0f5748a2bc28e98340e0d1f9eb1ab7d6485af000a4d5
TLSH
T1EEF02703A63A2C5628A8F4B1D26EB96C0F413FA3FA90332608F9B04071206D6237309B
MD5 SHA1 SHA512 TLSH

Submit Download

TeachingFeeling_sf.sav (deleted)

Path /storage/emulated/0/Android/obb/com.himikos.hentai.game.teachingfeeling.dev/TeachingFeeling_sf.sav (deleted)
Size 50B
SHA256 4e65f3bfd057d0d549a58a68fdf0872fad414a8ffef052443113f687ac70c6b0
MD5 e43090515ceb93c5b0349be6aa544757
SHA1 1d82cf60ffc53316d9a97db9b1826c8d7f523949
SHA512 42994ac9c497656d37b7b4ae964c09522c27402738df70dda80bcfe8aa837b3f714598d0aa082cec81ac8561d761c05b2fe552b518a9b5350aa862b529a95647
TLSH
T121900214A637246E1400840182483A591070AC159040B09254E665A051144E01216A29
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads