b036dd8da773665b149e72fe734642475d038f19a5475ea1b03aaa389102c0e4

Analysis

max time kernel
6s
max time network
22s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/11/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ninja-Gaiden-Black-v0.9.52-full-apkvision.apk
Size 16.7MB
Sample261102-ejw8mazyat
SHA256 b036dd8da773665b149e72fe734642475d038f19a5475ea1b03aaa389102c0e4
MD5 f2ebb6e8481125fecdea22c142da6964
SHA1 04987b9945b6eea4ffe8311ce74cafbc053cbec4
SHA512 e72b9d9df697912849a1e4c388f7ecab375b23ea600623057dc18b3cdaeba2872bfaf28669cee78b1cb904b190f454346fac1668b4fc435e06655afddb304c2a
SSDEEP 393216:i7Xm+r6ARWjeL0Nf0FrhgVhKB0CYrLVNIzV2okh+ReDLl5NX0dZHcI:izmUojOFrKVhKB0rLV2zVHkoRmLl5Ns3
TLSH
T1AD07334A1F0AEC0BEE0E48FFC5B6D06CC651196F0DB16598CF0B47A50A9105B4FA7EDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	io.github.gamboozino.ngbrecomp

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	io.github.gamboozino.ngbrecomp

io.github.gamboozino.ngbrecomp
1⤵
- Obtains sensitive information copied to the device clipboard
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:3339

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Clipboard Data

T1414

Discovery

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

base.3339.tmp

Path /data/data/io.github.gamboozino.ngbrecomp/cache/oat_primary/x86_64/base.3339.tmp
Size 32KB
SHA256 2d69d1f5b649062fb870cd2bbb019440a5dda80ad5bc67d8270290b89cc9f1d0
MD5 73014b25e69bd2d1e25efe6efd51617c
SHA1 6b12b1548acca50b7e1051d0b99ffd7b60317212
SHA512 845a03547cc0c2903f510279e8d4e29273ab36a7320fa664eac1f71199ae167ba41fe7d90e3234f554744fba8fda5c7fcd2844dc42d1c5d032c4ec5bf62c4714
SSDEEP 384:dFHe24FqiYWMCCZFr2CW69zp51e3H7VbSzhTA+tLwf7uJD:dNb4FqTRCKLoXlt+tauh
TLSH
T100E2621FD9A36050C0F7ACF7A78FA6DCE56EC069120E1E054472BB7FE419606EB50EA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads