e78bee706e5b7dd75135223c469c993a758a1c5156dff151bcb9fef474366e00

Analysis

max time kernel
25s
max time network
153s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
30/10/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
yeruverse.apk
Size 20.4MB
Sample261030-1psy2sgx2k
SHA256 e78bee706e5b7dd75135223c469c993a758a1c5156dff151bcb9fef474366e00
MD5 717dec95b7a130ea41db1f92078de464
SHA1 0c590ce8ca516bbbace2bcfc42646398ba4644a5
SHA512 ee9b5021cddd1cebbab02903c91de7c4dad2180af8024db4a91f9a8916b796c4d2051d4ea7440523cd5288542a0de9d81485fffe8201bb576f933e7804e7f9b0
SSDEEP 393216:GU5wQ9KUTDNXGDpoqAZBNeXnWAEptSbi1z8I0bwpi9xS+4Fo3Rvlq5:pdTZiXnWAEHSeS/vlq5
TLSH
T1E927E15EF68DD82ADDE2B0BD8C8805B2632B7C501516C3AB3C20311CBD77BE54BA9B55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	cc.yeru.yeruverse

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	cc.yeru.yeruverse

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	cc.yeru.yeruverse

cc.yeru.yeruverse
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4086

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/cc.yeru.yeruverse/files/profileInstalled
Size 24B
SHA256 3ff2e2e108bfa8d745df582737cce6ce74051ea7db7a2608846bab1d876afd73
MD5 b5216435aeb906653be94756e6fe3c00
SHA1 3ef15e2c5bfbb914a36ea3b38776e4f8a58233c4
SHA512 b10e64da52cc9a1685326d7a5f03e99c80596e912ca66a73c170daaf8a1016900f70537bac02f93ac34204e7f808309e7ce798f493bc19499eef5524bd2aba25
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/cc.yeru.yeruverse/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 08c87f4fdc7abf19690d0343ab75637f1d298c7d4992934475fb80d06ee758c2
MD5 5053d1633bcad88876a62b2713d17527
SHA1 ffccde0881f3daf298b383aa19c5ad2008e1ea3c
SHA512 3f44d36ca423ce36c0e50e01d80d84fa9afc76b62261db74ce680805b252961a59e03dc3ab61a64bf7dfe1480841afc883caf9e9da1e05c1023c1b3ab6f982a4
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/cc.yeru.yeruverse/primary.prof
Size 1KB
SHA256 a7b7f419fd623d0eaab89864f36d37ff2dceb97e66a8127760d5b097b1dec19c
MD5 78451b41fce2524d1977fd6988991eb7
SHA1 7271b299a7902eb46d4f1d9bf5bdbfaf0919723d
SHA512 d2b74c91f69b89875171f0d24efd71024c3bddf6f3a607bd1be0d37c79da8db76da67450d765c62629a767757808cb0833950790272e5b2daa959b33ed00eeed
TLSH
T16F21D884457CB01DF822B73E45D80812BDF3D86DC51466173AB48B7FA13851468AA504
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads