76f9977ff23eff9e691e942896cc119ae6c9e4f86d45868f053cbc49a30107e1

Analysis

max time kernel
47s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/10/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
snowball-derby-uitest-debug.apk
Size 5.4MB
Sample261030-phpr9sdv2q
SHA256 76f9977ff23eff9e691e942896cc119ae6c9e4f86d45868f053cbc49a30107e1
MD5 57053a58abfd6d74f2a3f60feec62a5c
SHA1 7c8d770b5d2a713fd5bf1aa88331644198cb8ce4
SHA512 8cbbfe96e328f7c903f64f25e71390e098e383be99391465c8f26f06ad7cb3d1182b8296c68804230e17e0162a08eaffb32136604d4cb794835dbf4db40e8e80
SSDEEP 98304:IH6SneqAVkGocq3qOPvpD3eYqGo0zAGRUbUYQ/wKAj7F5r4OS9aT1iwoHD:uGqekGfv68t6hRv/wKQ5rI9qe
TLSH
T1E6462382E3E1AD7FCC7385321FABA77616A25E528552C3138528B62C5C77AC88F45FD0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.osama.snowballderby.uitest

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.osama.snowballderby.uitest

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.osama.snowballderby.uitest

com.osama.snowballderby.uitest
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4825

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads