General
-
Target
shadowsocks4.0.1_android.apk
-
Size
8.8MB
-
Sample
240522-n7kdeagb8z
-
MD5
a7d32c91f0e650e43db3da6d0f8a9be3
-
SHA1
3260b8ba76dc98ef3ea4878488b2779a8bfc0a86
-
SHA256
0ae7293e2437078ce05e55e0bf1bd27c2d4f4d3f3e7d5b41ac77706f792dd59d
-
SHA512
675fde4ff8fd6163f53cc30673d179a861b491c986a7e3edbb8dbcaa04bd13a9ade3926eddf35f1cd85e53c0403c84af5f4c8f2c35fef5b259a9bdb1a6020efc
-
SSDEEP
196608:eDkVaV095oNK+pb9O7cDgeBtmE0UxvaszD5Mat1z9mX3033U2H5Udrkl/Z:eDkP9iNxRI7mg6tmEHJnzD55kk33U7YZ
Static task
static1
Behavioral task
behavioral1
Sample
shadowsocks4.0.1_android.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
shadowsocks4.0.1_android.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
-
Target
shadowsocks4.0.1_android.apk
-
Size
8.8MB
-
MD5
a7d32c91f0e650e43db3da6d0f8a9be3
-
SHA1
3260b8ba76dc98ef3ea4878488b2779a8bfc0a86
-
SHA256
0ae7293e2437078ce05e55e0bf1bd27c2d4f4d3f3e7d5b41ac77706f792dd59d
-
SHA512
675fde4ff8fd6163f53cc30673d179a861b491c986a7e3edbb8dbcaa04bd13a9ade3926eddf35f1cd85e53c0403c84af5f4c8f2c35fef5b259a9bdb1a6020efc
-
SSDEEP
196608:eDkVaV095oNK+pb9O7cDgeBtmE0UxvaszD5Mat1z9mX3033U2H5Udrkl/Z:eDkP9iNxRI7mg6tmEHJnzD55kk33U7YZ
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-