47ad37b67f48c0d76f5ee2d284cdab971ddfe76ec58d2ff1a57623201b147e9e

Resubmissions

02/11/2026, 20:07

261102-ywdftswyfy7

02/11/2026, 07:50

261102-jph1eaf16x7

Analysis

max time kernel
122s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/11/2026, 07:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mesbah-sadeghin-test.apk
Size 9.5MB
Sample261102-jph1eaf16x
SHA256 47ad37b67f48c0d76f5ee2d284cdab971ddfe76ec58d2ff1a57623201b147e9e
MD5 40686d2d91cbbc7f079d00f5fbb9a5ab
SHA1 bcbcac1332b8e4a3510183f965ba50833b0ab535
SHA512 0bee4e570dc698c1239d5d46c310f015907b9824eb4780e46e5685960a7d855aacbffbf2a9f9157379a9943d0ab10ad2a6df0fbc1dd91e8c505231ffc3e1a6a2
SSDEEP 196608:f170RSYAIm25fKqGea//2OYxvEdltj0/7UgF8BB2aLm8/D:f1707XJYOvEdl5YUgF8DVikD
TLSH
T179A6339491BB954EEE7394F19C4F6F5B82134F19C853B3C2622D56096AB72B03F18BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	MesbahoSadeghin.App.dev

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	MesbahoSadeghin.App.dev

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	MesbahoSadeghin.App.dev

MesbahoSadeghin.App.dev
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4731

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads