General
- Target 887077eebe54d4ba77cf74c5aa507987.bin
- Size 10.3MB
- Sample240602-cb7chsfe59
- SHA256 28360a0ed26ff2e5a3684a8913a6cc7718d550ac25916360b4cf2dc8a5c72bb0
- MD5 887077eebe54d4ba77cf74c5aa507987
- SHA1 d178f2d02f2e593211e561cd4ad90c913393d3ae
- SHA512 7f9c7fe69e09aeea7e0781c497aab4a9ab2204b35fae549993d102f4a156b3bd5c85b6717fa2f904d4d920f591d777677c43ad2db2f39b8abc7ca444cb68031f
- SSDEEP 196608:84fHOP3zBIyTsvMrgNUCF/2KiuT2ylDm9cZ+pv3+Da6Q0HYaCqHEhcN:ZPA3JCyu8+Kv3qSqYaCO6I
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
887077eebe54d4ba77cf74c5aa507987.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
887077eebe54d4ba77cf74c5aa507987.apk
Resource
android-x64-20240514-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 887077eebe54d4ba77cf74c5aa507987.bin
- Size 10.3MB
- SHA256 28360a0ed26ff2e5a3684a8913a6cc7718d550ac25916360b4cf2dc8a5c72bb0
- MD5 887077eebe54d4ba77cf74c5aa507987
- SHA1 d178f2d02f2e593211e561cd4ad90c913393d3ae
- SHA512 7f9c7fe69e09aeea7e0781c497aab4a9ab2204b35fae549993d102f4a156b3bd5c85b6717fa2f904d4d920f591d777677c43ad2db2f39b8abc7ca444cb68031f
- SSDEEP 196608:84fHOP3zBIyTsvMrgNUCF/2KiuT2ylDm9cZ+pv3+Da6Q0HYaCqHEhcN:ZPA3JCyu8+Kv3qSqYaCO6I
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Listens for changes in the sensor environment (might be used to detect emulation)