3e05db78a393a8b8694c3826893b04a38d5eb741c4244fe497354903e46dfddd

Analysis

max time kernel
22s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/10/2026, 00:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
E.-v1.0.0-universal.apk
Size 4.6MB
Sample261030-a72e2avsfx
SHA256 3e05db78a393a8b8694c3826893b04a38d5eb741c4244fe497354903e46dfddd
MD5 ced614a79fbc6ff3e8ac49fc8a99a42d
SHA1 a45c1cc1f24f5b9ce2d42144eb45d9ebef031fff
SHA512 eecad1cc0355df304b441ac2571269156370cfa057de487528f870c5151166640eac740bb1285f4ee460dbfbec6a850c5f779a760b738256ac190b657c71c71d
SSDEEP 98304:dB2M1d6eH6hFv5vFhbHn7P1QtA3/dYmz606ScBlbeMqCv0HgRYPNnyEiOtoE:aM1dZ6/ZFxH7qtk/dYml+8MU7PZUOV
TLSH
T1B6261282E7E65D2ECC7745364FAB12305666AD078693D70BB95C322C2F3B6C44E64BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.ednovas.donguatv

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ednovas.donguatv

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ednovas.donguatv

com.ednovas.donguatv
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4699

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.ednovas.donguatv/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9f8a081affbc31471891b468eb5ce145b761d4a44c189b1e042eb73a800e891b
MD5 df409751a13a4d105eee90ab3c6ee2b4
SHA1 a409128fe736c25fb93da6f8ff4f46efa39d17d7
SHA512 17ef6e98813654534df448eb79dd8ba548e64110735deb4180485e3ce027031c076cf925eea29e4e10c341d7015e095d3f3b58faab6a8fb7e38ff5f0bf8d244a
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.ednovas.donguatv/primary.prof
Size 2KB
SHA256 40ab99c1fa4cc45e3c8f92aaf47940444101eaa15b770d03173fe3100f1f8513
MD5 5a7815d4f204b32b9dab215b0ffeec98
SHA1 640758851b5280f2f7c192189d441fc099854300
SHA512 d08919ae269566800f4237723873468a293a2be7feba34f325c552b94e508620b4f885c27b57a5745958efc26bfa678a7869f29eee9280e9275ea2fc75b3dfdb
TLSH
T1F9511A60346250A6BE3D7C428838326F2C9CA16B351C79A8526CDF1880996ABB78B31C
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads