4ef43531dd798519db72260765463f4fda6e3eaa706330aa500af220e690e70d

Analysis

max time kernel
22s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260721-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
submitted
13/11/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Moj-Spiewnik-Start-1.2.2.apk
Size 25.0MB
Sample261113-am895sys4q
SHA256 4ef43531dd798519db72260765463f4fda6e3eaa706330aa500af220e690e70d
MD5 87dff66c3290fe003569b0dbdaa77bc9
SHA1 f1817a2adf5cec02a9e8d9f3199f0a3da0411a64
SHA512 bcfe9778d2d1666da0c56e23aeb88c884d1b4784650fd58075168215cb3920d081060b62cae4d973ffc4dcb169d5f05452cc149e38ef81959f6e3e0b69c30dce
SSDEEP 393216:Lo8n49UTnL+IdhmjKsQXzGRvyrnd7Hk7BJa+c0KyaSSuJVPBNip4/G9K66aFzk6W:94qnL+IEjK7zGRo93W
TLSH
T14247E185F55B44BDC9AAF874468E9133E6243C098313C49B9F85EB10BA377E09F3A752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	pl.jone.guitarsongbook.party

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	pl.jone.guitarsongbook.party

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	pl.jone.guitarsongbook.party

pl.jone.guitarsongbook.party
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:5009

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/pl.jone.guitarsongbook.party/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a9c8ee4d80d1372b1715bea1c8f3d92d2d26b47e266f51d27f59e3069bbeacfd
MD5 2adec9df9be2b7daf818bac9af5d4094
SHA1 a7d8590449e56dc6372d4498532ac96d350d7c86
SHA512 7849cac1d17657273aff61f514345aeb7c24cf6107c3795de48036375728e982befab6ccc4178f8153fce3f236566f3cf6080a9158fcde02548831f6c1c35162
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/pl.jone.guitarsongbook.party/primary.prof
Size 2KB
SHA256 06ccf0f11dd50087366e3ba66ea78d68fa180b3fbbfce3a5cc49b69119c8c6fc
MD5 b11537527940f1c3c213059bb99a66f8
SHA1 2736203f8cfedadb1fad5fd1d9880a9a37fa75e4
SHA512 7c80cf52c981a9647f6a25cd16aca1728c5bc0ad7544ca3a9aba25e3dd9aec7f6d63c274bf15a364f82e97e2f7b80dd0df0d53dc120a2922322fd72a08506609
TLSH
T14A514DA3CD24DBC27EE5A4C73A2C72BD652B170234587B01DC4D4E6686B914C338A368
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads