General
-
Target
cryptoapp.apk
-
Size
3.7MB
-
Sample
220704-d3qdragdc8
-
MD5
520855bdec84895dd57eb97e5f30b6e3
-
SHA1
51428eaafc0d544da9a56ba00b8c9c774a01153f
-
SHA256
b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
-
SHA512
b608aa376c1919cfad95d1ec31943b9350f8c25d30f60610dd1263e08b75fb5c400e635aee815fa29d186b9887e57b5cbb592e67d2e987a858e53e5f3d7c7e26
Static task
static1
Behavioral task
behavioral1
Sample
cryptoapp.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
cryptoapp.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
cryptoapp.apk
Resource
android-x64-arm64-20220621-en
Malware Config
Targets
-
-
Target
cryptoapp.apk
-
Size
3.7MB
-
MD5
520855bdec84895dd57eb97e5f30b6e3
-
SHA1
51428eaafc0d544da9a56ba00b8c9c774a01153f
-
SHA256
b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
-
SHA512
b608aa376c1919cfad95d1ec31943b9350f8c25d30f60610dd1263e08b75fb5c400e635aee815fa29d186b9887e57b5cbb592e67d2e987a858e53e5f3d7c7e26
Score8/10-
Makes use of the framework's Accessibility service.
-
Acquires the wake lock.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-