General
- Target QHFELN.apk
- Size 2.0MB
- Sample240508-rr4c5abb48
- SHA256 8f323a9be85e9f1d8a8889e97d66bb683059e76c2bb3b5cbb25dd891c43b986e
- MD5 866e301e0bfda8d8bcc00f1add5cc50f
- SHA1 6abdd8173b6049e609daf1175f7648e950760928
- SHA512 2830cd29104e83ba92cc15513fc938dceabe6cdb7113b70df383f5a38fb183b5c6747a714ba0594618a4e30595a442eafb7f76bed00d3c53825f3e91b45ed555
- SSDEEP 49152:cPLlqeL9ERuMJb+qu6mlGNnavcSNbEu5Tpli:cPLZqO6naJNbE+i
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
QHFELN.apk
Resource
android-x86-arm-20240506-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
QHFELN.apk
Resource
android-x64-20240506-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
QHFELN.apk
Resource
android-x64-arm64-20240506-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target QHFELN.apk
- Size 2.0MB
- SHA256 8f323a9be85e9f1d8a8889e97d66bb683059e76c2bb3b5cbb25dd891c43b986e
- MD5 866e301e0bfda8d8bcc00f1add5cc50f
- SHA1 6abdd8173b6049e609daf1175f7648e950760928
- SHA512 2830cd29104e83ba92cc15513fc938dceabe6cdb7113b70df383f5a38fb183b5c6747a714ba0594618a4e30595a442eafb7f76bed00d3c53825f3e91b45ed555
- SSDEEP 49152:cPLlqeL9ERuMJb+qu6mlGNnavcSNbEu5Tpli:cPLZqO6naJNbE+i
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Tries to add a device administrator.
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Requests disabling of battery optimizations (often used to enable hiding in the background).