General
- Target ab99a1110f11fdc79bfd6bad86034afd.bin
- Size 10.3MB
- Sample240616-cf2ylayeqm
- SHA256 f989a884889b7ac450c21902bec20e3ceb31532d4d65105a5084c4819a03e32f
- MD5 ab99a1110f11fdc79bfd6bad86034afd
- SHA1 d744813f243f5f8f881f56ae792eada1fead029f
- SHA512 0d02f7146fbe0ce0017046e0c8e01fd921f3716f1356b9c81af37c3b335ff66c1111380d2e25fafd93a45727457ec918ac316e4c4ec1f5d8c5f73f2e905ee39d
- SSDEEP 196608:4QJbwwFKvkS1IC16cIOb3I6ro5LyyH4JbRgi7sDaELFiZl2LOFO1f6d2L1FO146k:fJbwwIvkArfIOb3m54J1giYZi72LT1fz
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
ab99a1110f11fdc79bfd6bad86034afd.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
ab99a1110f11fdc79bfd6bad86034afd.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
autonavi_Resource1_1_0.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
autonavi_Resource1_1_0.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
autonavi_Resource1_1_0.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
- Target ab99a1110f11fdc79bfd6bad86034afd.bin
- Size 10.3MB
- SHA256 f989a884889b7ac450c21902bec20e3ceb31532d4d65105a5084c4819a03e32f
- MD5 ab99a1110f11fdc79bfd6bad86034afd
- SHA1 d744813f243f5f8f881f56ae792eada1fead029f
- SHA512 0d02f7146fbe0ce0017046e0c8e01fd921f3716f1356b9c81af37c3b335ff66c1111380d2e25fafd93a45727457ec918ac316e4c4ec1f5d8c5f73f2e905ee39d
- SSDEEP 196608:4QJbwwFKvkS1IC16cIOb3I6ro5LyyH4JbRgi7sDaELFiZl2LOFO1f6d2L1FO146k:fJbwwIvkArfIOb3m54J1giYZi72LT1fz
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
- Target autonavi_Resource1_1_0.png
- Size 322KB
- SHA256 a47daf072b99a10f346d18e1d0400b9a1f16340ee823dd89e6ef95c86c944f48
- MD5 bcb7f38817dbabc6bd8f37f0075a9a8e
- SHA1 45b89cf15edd901f2ac88667f21b47854d96dadb
- SHA512 b7614d444ef63faf831c8b85d73e9e2e7af4f72a2e91c8f4356c7eb37a0a60db042e5547bbb74bad5d3b7c668d160e985fe6760fb702892688d93db71b3ac572
- SSDEEP 6144:Tmo1/hlc97+QEbNMRo2r6+CmGe0wC5q98C8REGjWOg4PhWuG+:Tmo1p47xy2r6+cwC5VEGj5g4PhWl+
- MD5 SHA1 SHA512 SSDEEP
Score1/10