Analysis
- max time kernel
114s - max time network
156s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
04/11/2026, 18:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
NutriLens.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
NutriLens.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
NutriLens.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target NutriLens.apk
- Size 6.9MB
- Sample261104-wye2bsec29
- SHA256 84e171cac6d208de2ca6978bb97a2c666567a152a795b94ec8b79db4c135c617
- MD5 985904bebb10e9decdde1bc05b4d8503
- SHA1 ac92219399e3c7bd56453cd670baabd44b294245
- SHA512 95abeb97870e4a6cdb1ea47b9b37a6436ff10a54d0cc08893dfb3780d471023783fcc10966eee31eebf3bc7f5f5b6ef60b54ad68a7c1f4285b176a51c19d9cab
- SSDEEP 196608:HBx4rmylxN4eFZO3Q3b48oc6f6Q3b48octFt:hxkm6+eqy48ocgh48ocLt
- TLSH T1247602DBF7985D2FC87304B2896E52B556574D028A83DF836D44361C297B2E82F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.nutrilens.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.nutrilens.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.nutrilens.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.nutrilens.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e699fd79f9721424b1314727517e539baf4092356d799df5e2c1c0c5827d7a1e
- MD5 b5d4508312d0b7495b5c045cc29d3062
- SHA1 1a8d829ff6506387543f1040c9f75827f5a50bf0
- SHA512 21aa6e302c5b89f6e033eb901ab2615e97fbadfac01b94251fa2cbbc91f7a56c353edc20d65f17b2096e1deccf28407c5d51889994b74e0d15d0821af07cdccd
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.nutrilens.app/primary.prof
- Size 2KB
- SHA256 7534a5a390afa31d93fdc0f9fb220d3856a987669f387acd01e0d115b122bc60
- MD5 425fd10acf3b0f65e45f6bb21ecce91a
- SHA1 316b8f4c76bbab89ec99b829b4468df448a8a131
- SHA512 f48324a23214621f624c3505ad0ec91888538702c1bcbf0ff6d9c17a5f048ee3b3ced7b89916dcd229535d120eae97d3e7d77416cb8017432e3b751f643c0c92
- TLSH T1D1513957E42749523E1D0E83B85382B52DA96F47D81B3628B9819FAE3D83602F452C85
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.nutrilens.app/primary.prof
- Size 4KB
- SHA256 a724102687ee9b07c4047a012c9b1aecd2c0043e48363b05f9b3cfe778add8ef
- MD5 e8c132865cd03fb4ff02e2a17b0f3560
- SHA1 3df6d1f02a2b256929d7679a7d92478218c4afaf
- SHA512 12aa7dffaaa2a8742dc2d5bc47fc373e37eee7d819a03aec3074d16a143b6612e8d74339e6bac8fb7ffcc84781043ffafeda8661fe5f6b4ed80510f29aaf6fc3
- SSDEEP 96:u48MPLq4COxqWatflOH2WY/CLGKCzoU7XjJq/QgwxeKpgihx7Ptzsf:R8CCJBfYFY6ynomI4/eiT7ly
- TLSH T11E918D48820C43652EFB4BB74D9370F5EC6742B97401FDE064459B79CEE2586C32B76A
- MD5 SHA1 SHA512 SSDEEP TLSH