General
-
Target
shadowsocks--universal-4.8.7.apk
-
Size
5.4MB
-
Sample
240524-ntbjcafe79
-
MD5
a52724759f70ad5c62ce284c136139d5
-
SHA1
249747b674d5b33d94629e35d9b012a63e3a8d8c
-
SHA256
ca527d0a6c31782bdfc73aa32e46d9f241087bee5bd9b9164248ecd6cc56255f
-
SHA512
8cde58a6edacf0ce0cfc4bc2242c6b95a2a13980fb7efb2a7ef23ea702508169990a63a6ee3736afe83d2ffd2c6d7cbc38ef82ecfb8f63a0f6d7e0ee43ddae11
-
SSDEEP
98304:ZQSKS9+bQrPKcmSBd3eXu2cuiv89C2G04+eYROp2maik9pr5b:ZZbKcm+83cuiIC2GFbUOp2malR
Static task
static1
Behavioral task
behavioral1
Sample
shadowsocks--universal-4.8.7.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
shadowsocks--universal-4.8.7.apk
Resource
android-x64-20240514-en
Malware Config
Targets
-
-
Target
shadowsocks--universal-4.8.7.apk
-
Size
5.4MB
-
MD5
a52724759f70ad5c62ce284c136139d5
-
SHA1
249747b674d5b33d94629e35d9b012a63e3a8d8c
-
SHA256
ca527d0a6c31782bdfc73aa32e46d9f241087bee5bd9b9164248ecd6cc56255f
-
SHA512
8cde58a6edacf0ce0cfc4bc2242c6b95a2a13980fb7efb2a7ef23ea702508169990a63a6ee3736afe83d2ffd2c6d7cbc38ef82ecfb8f63a0f6d7e0ee43ddae11
-
SSDEEP
98304:ZQSKS9+bQrPKcmSBd3eXu2cuiv89C2G04+eYROp2maik9pr5b:ZZbKcm+83cuiIC2GFbUOp2malR
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Checks the presence of a debugger
-