Analysis
- max time kernel
24s - max time network
154s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/11/2026, 18:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
NutriLens.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
NutriLens.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
NutriLens.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target NutriLens.apk
- Size 6.9MB
- Sample261104-wye2bsec29
- SHA256 84e171cac6d208de2ca6978bb97a2c666567a152a795b94ec8b79db4c135c617
- MD5 985904bebb10e9decdde1bc05b4d8503
- SHA1 ac92219399e3c7bd56453cd670baabd44b294245
- SHA512 95abeb97870e4a6cdb1ea47b9b37a6436ff10a54d0cc08893dfb3780d471023783fcc10966eee31eebf3bc7f5f5b6ef60b54ad68a7c1f4285b176a51c19d9cab
- SSDEEP 196608:HBx4rmylxN4eFZO3Q3b48oc6f6Q3b48octFt:hxkm6+eqy48ocgh48ocLt
- TLSH T1247602DBF7985D2FC87304B2896E52B556574D028A83DF836D44361C297B2E82F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.nutrilens.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.nutrilens.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.nutrilens.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.nutrilens.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.nutrilens.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.nutrilens.app/files/profileInstalled
- Size 24B
- SHA256 403209dae2b41a27d79d0bf8f5c441027a4ca6c43ab93fd54fd0dc5504206c2b
- MD5 054067078835067d5decab3aaf71e328
- SHA1 50798699df0653cd0933aebd8aeeb8c0b5da6b59
- SHA512 94d5c792906f9946cea1d6fcc5c16f8b004b55ac57f844f6fc471ada6f2df4ea922cbecaeac25cc1464d083880160ab5788d0e3ba8d3c8d28d1163339106f8b7
- MD5 SHA1 SHA512
- Path /data/data/com.nutrilens.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d5668d87c002e2c37d0c39ba54f186e14f3a7cd9f840ebc96b32dc3c1a273f4e
- MD5 580b466db2dfd015d3d493d2aa16b043
- SHA1 189a301a14d10a44eebe4e0bf08f21046a130e3b
- SHA512 d78485e01b7a98aef3afc4cf545807fd8028678bca10c4174e6790f0bb381308d78b184d545f19d704070a76e13ad203e5d768c0a3e31e4b140af36765dfbfb8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.nutrilens.app/primary.prof
- Size 2KB
- SHA256 7534a5a390afa31d93fdc0f9fb220d3856a987669f387acd01e0d115b122bc60
- MD5 425fd10acf3b0f65e45f6bb21ecce91a
- SHA1 316b8f4c76bbab89ec99b829b4468df448a8a131
- SHA512 f48324a23214621f624c3505ad0ec91888538702c1bcbf0ff6d9c17a5f048ee3b3ced7b89916dcd229535d120eae97d3e7d77416cb8017432e3b751f643c0c92
- TLSH T1D1513957E42749523E1D0E83B85382B52DA96F47D81B3628B9819FAE3D83602F452C85
- MD5 SHA1 SHA512 TLSH