674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184

Analysis

max time kernel
93s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/11/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app-release.apk
Size 6.3MB
Sample261102-pl98dafb25
SHA256 674e6eb48b5d4be6304c00f5bd21b055e1bcd69a6077c903c5a2af4a82a08184
MD5 c6665eef112f1c7c7431c6d2147ecb97
SHA1 8e17d643b02bdc61fe01ce71d99afff9b192edb0
SHA512 0cace28dc2383f204bca8189a58fd2bcd682047feb208b79de4167694965e862635f8267a53439be7547516223943e582630db8a8ae9084b612aa839cb262126
SSDEEP 98304:pZVc7chQ2Di2tHAQ+ulQqEpAFOWWAjiwu5kCb9yuRo8zIrSPUwhdKHJAOAZLy41k:pM7Z4HAQcGaAjpUkCbbRZz0GOAZLyK8
TLSH
T18B66F19EF7195A2FC47710728CAA5233125B4C16AA4357736978331C38BB6E88F49BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4810	co.median.android.krljmlk
/system_ext/framework/androidx.window.sidecar.jar	4810	co.median.android.krljmlk

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	co.median.android.krljmlk

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	co.median.android.krljmlk

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	co.median.android.krljmlk

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	co.median.android.krljmlk

co.median.android.krljmlk
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4810

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

INSTALLATION

Path /data/data/co.median.android.krljmlk/files/INSTALLATION
Size 36B
SHA256 284432e4a348627538e8e0ecb161ec1ef383c39bf4db03528117c7ab1fe85bc2
MD5 88b852398dae1d382d4a357a4f83241d
SHA1 8c83272d2094d163c0c8860faec927e14eb589ca
SHA512 1d7e48e9bf063ba7bd7c48c5fa6e428fa8b9fe2fbb2c0386bbc24ee77a5b7eb56f5786beae050d04640bad15805239325c6330dbe7b584ef6145b75927b7ea14
MD5 SHA1 SHA512

Submit Download

regexintext.json

Path /data/data/co.median.android.krljmlk/files/gonative-config/regexintext.json
Size 1KB
SHA256 82060eb0118948c9793fc668197a0e37349ebc21b6c2fe7e277af77a6c75eb70
MD5 e3bcf29dabcc20796c9b4132239c9bf5
SHA1 6264e968b80f7f791b0033358b69e99b73f226f9
SHA512 3bb84e83f7b93eebde425f697e81361a45bfadf6e110caf2a16de34e533b3b8447a1fd9b12eab81c2448edc7a4cd6f7ffaef5aa4173110d20ec4644d2d2c26d9
TLSH
T10B410474C9380DB398C82864B25E421B3A72215B2FD5391CFB8C162C1F4C5BE69B420C
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/co.median.android.krljmlk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 f6053f69afc13aa1ce2d510686fc51301ded6785614c385d48816b7fc113192c
MD5 27281349609d6a73ce11ce7cd618703f
SHA1 9b7a6c54f84b0a6cb31fb28fc77d42f7223d5125
SHA512 a70bc4f14954eec8f8f490cb73039874e4750c9b5a52e5f385bf56821e50448775f39ed902fa8c88c2df1cc93f78499f66f2a0851466fd216548998a88045b6c
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
Size 1KB
SHA256 240211707e209820516c0a79729077c1400e913886c5b376f194c1e46a155900
MD5 aa6e13f2f3f4e623fbeff27e3f81b4de
SHA1 41379046b787014580def202930dce4d4c6582d8
SHA512 87fd9627056f575f618bfacc03dfd87b3438a86db6a1fc356019ed28806f2a5183994c1cd2914a185506f59b7fb18eb685907bfda0af713ac4780a7171ad9281
TLSH
T1E041F98802D5E10C52531B6A01A44933F3F2F663779200BA8C39F88C13534BCA4523D7
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.krljmlk/primary.prof
Size 4KB
SHA256 fa525654e6754a5446163332ed0bd9fbabd301601e51199dd1dd9a8088fbe5c5
MD5 8b26f4bba426478aea88fc08fc2c322e
SHA1 6951c6e6d8cc9a8e70b6e5f45e68b9540924387d
SHA512 a1c74044b4b7b6a8dab4da68f4d3a5e38e26b1337abad00cb0aeb729f10bb728c512212a4d013770adbeb37cb7a245ed3abc7a047236c87e6cc0e53ec67c8e6e
SSDEEP 96:Kp5zH9cfV+OCrNRhvXeoeoZxfUTYsfgCr+Zp:Kp5zd6SrjJXtZxsTYsfg+O
TLSH
T105916E18FA8A655D62917F018E05BA57E01F19AA6CC797A41B78C0037EB330F432D217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads