ae8196dcfc66c842ab049171689b0cb3d6e12a2a572d2b7bb11a97f870327cc5

Analysis

max time kernel
17s
max time network
22s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/11/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AliceController.apk
Size 62KB
Sample261102-pc89qahv5v
SHA256 ae8196dcfc66c842ab049171689b0cb3d6e12a2a572d2b7bb11a97f870327cc5
MD5 cfe0760bcdebb0d401a339b411c0a236
SHA1 2bf7a385d9254880ea3d66c2eac40ca3fab92333
SHA512 f258e3760145d06b97fcdf4139a2f35f428253d0a58715831ea1d930cade7b01e0c25111866563a9257b9f6af5a93858a83577278f9d328d367dcba701b62033
SSDEEP 768:5lDrKju6vy5gutEVXltZ2Z1pfkIfIcyQGPywOgvpmmrgxstpS+e7kCnw/LcFiGER:5lDGgguE12Z1pvfIzgCcULcFLo6s
TLSH
T1E953CF06B7CCF15FD8B3A232561AC9D71D14E890AA15F72F3A24605D1DF2B870B1AEC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.alice.controller

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.alice.controller

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.alice.controller

com.alice.controller
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Checks memory information
PID:3394

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

base.3394.tmp

Path /data/data/com.alice.controller/cache/oat_primary/x86_64/base.3394.tmp
Size 16KB
SHA256 e76d2e0f0285e76e3041ce8f07934e4942bbcf6f9278811bb0f72c06cdea8768
MD5 7de3c745584f86a370c88cf788935e18
SHA1 ac676b6906c3cf3ddc5ec3472ba81629fca28c4b
SHA512 49ad9d1e6a528bbea735b95655562910327a6fa780f86fa091c757b7d95b7f138f44ee5648866139894e8bacbb405ae06c6dc6bc394de6a608a595a9bd7ceb95
SSDEEP 192:x4QirCHr0P/PxUF/PwSwNqmKUdzEXm2ncN:x4QQQuxU29NqlUwiN
TLSH
T19372842F561058C1C1A37AFC868B0AE4CEB611A0165B3F0598B2D33FBD31714CFA27A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads