General
- Target FotaUpdate.apk
- Size 2.7MB
- Sample240601-eksxlahg77
- SHA256 8a7c5bf8d4f1b0588bbb9cd1681ecd9e8ed1fd8845497066151ddf4a9919f09f
- MD5 f1675e7cc6927d8f57584dce1468424c
- SHA1 1a9c1b97f712941f297cc66aa435cfd3818a4ba8
- SHA512 36b5b3065932e692eb584d0a25c9b94ad8a45120dcabbfb4371471cc8270f9daa667e8721cf0d2a1d50ba0d7d1c1f04447542d82c7dde4a6a0b2df7e071281ac
- SSDEEP 49152:oGJ10Iy/wiGa54jhm7pYMvVzpG3q/ppYEV2lnjgiJml2lSRU2kqLpopRGPgO:o8y/w/+4U7pY6u3q//Yl0iJml2H2kO
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FotaUpdate.apk
Resource
android-x86-arm-20240514-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
FotaUpdate.apk
Resource
android-x64-20240514-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
FotaUpdate.apk
Resource
android-x64-arm64-20240514-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FotaUpdate.apk
- Size 2.7MB
- SHA256 8a7c5bf8d4f1b0588bbb9cd1681ecd9e8ed1fd8845497066151ddf4a9919f09f
- MD5 f1675e7cc6927d8f57584dce1468424c
- SHA1 1a9c1b97f712941f297cc66aa435cfd3818a4ba8
- SHA512 36b5b3065932e692eb584d0a25c9b94ad8a45120dcabbfb4371471cc8270f9daa667e8721cf0d2a1d50ba0d7d1c1f04447542d82c7dde4a6a0b2df7e071281ac
- SSDEEP 49152:oGJ10Iy/wiGa54jhm7pYMvVzpG3q/ppYEV2lnjgiJml2lSRU2kqLpopRGPgO:o8y/w/+4U7pY6u3q//Yl0iJml2H2kO
- MD5 SHA1 SHA512 SSDEEP
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.