3d5ab1ce2b7adee7fde65c4301ba19d455112d576e910991844df9cfc5b5d56c

Analysis

max time kernel
26s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/11/2026, 06:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
biscuitcat-1.0.0.apk
Size 4.4MB
Sample261102-g3nfyaec72
SHA256 3d5ab1ce2b7adee7fde65c4301ba19d455112d576e910991844df9cfc5b5d56c
MD5 1440b8d734d0d34d8b6a6c045aa2c75e
SHA1 e072f9bf3659a2a82db92ed35ffb64cf8c079f38
SHA512 7743a579d82724c86dd2200df0ae8627f4654aa19276992e1c6daa9da088ed8e3e34d14884c2ae5274e8d18178426718ecd0cf8a08991a93a8eac7881a374378
SSDEEP 98304:N3gg29XyxH1fxe8/ULkHDDAVAiDZ6YdKId+6wRNYWj9UINAvp+VNV+O3kO:N3glQ/xJOAjil662NYZ3vpu/+Or
TLSH
T10E261282F7E66D2FCC3708364FAB027152169E13DA96C70B8894326C6C7B6D44F59BE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.biscuitcat.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.biscuitcat.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.biscuitcat.app

com.biscuitcat.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4713

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.biscuitcat.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 251b1f227f329b0719eed836129ea49165cfa7b465421451e96b2fabdc561b7e
MD5 1c57494f33f65f6357fee62c70aff531
SHA1 44390857f45215e8732ce7c8375260d91ebefdbc
SHA512 4c78adbb0a9f8376758f49ee5b3f6d7073ac4efa9715f5257f85c6dc022702a79f845541557987dbe51445297d7404b8bddbe2e85e98e6482d71d0759d6cac95
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.biscuitcat.app/primary.prof
Size 2KB
SHA256 73a6b758fad4f4cec4300745860a25d15456fac492f78e26b2db4ef901fa0906
MD5 1377d54af895e4187ed9a1b7a784168d
SHA1 59e73e1b9924fb2486e6ee7e43941dc70d7e0525
SHA512 28434be67c6b94392182b81d9bc753a206c74130c4a92a60356f7565ced976b59ac36cd7b3abe00c5d3988a7e6efc900f1be998821f88233829672d6f362c9e0
TLSH
T1155119C12BD2EB978CBFAEC0688508D5B86C8D333D2C1B4E17851E5BDA0D2B45365E93
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads