c25fbfd68c7267d1c0156775064f94ee3aca96260ab2d6c865c262f3e25849f0

Analysis

max time kernel
115s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/11/2026, 13:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ramifica-Ai-1.2.0.apk
Size 5.4MB
Sample261107-q58dkadv9j
SHA256 c25fbfd68c7267d1c0156775064f94ee3aca96260ab2d6c865c262f3e25849f0
MD5 2e047f2a6640f30579cf6db3607a77ff
SHA1 5b2ad48190791cc85634ae9de473f4851c50d15f
SHA512 3151e1d4fe8f25dd979007a1880fccb120d936850372e2155faa95a4edf273f284b56bd92064a41ff10b10c32bd455acd5c81f75185c1df13ed5e0900449d614
SSDEEP 98304:IBS90lSry7vhI84RuJVHXTpMf0sLLX3raZoLXZqgBtfmyaStI22z9ypOgd6kyK:Z90lyYegJvbsX3reobZqQteyaa+s
TLSH
T1EA462282E7E48E5FCCB758354F9B073226128E16DA83DB478968722C6C77AD80F45BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.inforprime.ramificaai

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.inforprime.ramificaai

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.inforprime.ramificaai

com.inforprime.ramificaai
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4698

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.inforprime.ramificaai/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 db5ffe2873695305414c3210547608aa3027657682082a24523c6e792e6ac693
MD5 46fcaf919b3bf8471c1fca9ac87232bb
SHA1 b9e8e933f92203b2c4adeb006e0761af40708118
SHA512 a702cdca80681ef53642b7752e4c30d9ee5a303ef14fea6923494d9f21142c28445ce7a0cde9f05ea9c5ae2eef7cd8b36dae2bdfac4aa2fa273f1ce49f270d85
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.inforprime.ramificaai/primary.prof
Size 2KB
SHA256 4bc88b54f9ef395f5396d87abd8a5f7daf180412bf8e9c7f3cf57778d441963a
MD5 3eed0bd2d28d707401390559ae12ca06
SHA1 2b9c0a1d2b1681c309970fe4ac744843ca5f0370
SHA512 1a2cffbb00acf390dfe3398df53b28037552b63abafb6fd1adaed3f9cc1bb83b449bb4de8307f096931d87c1dfed059b8b012dccebc966cdca7bebf4e5b721e4
TLSH
T104514C98C4EF6C0A2B2CA5D162333FFC8356AEC84315CF1097EFB84012928731265C97
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads