56fec181f0b43afa87d7cb76fbc5523ae788e5fed56356d5732a2f2b2cf6ab88 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

Vencord-v1.0.6.apk

android-9-x86

6

Vencord-v1.0.6.apk

android-10-x64

7

Vencord-v1.0.6.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Vencord-v1.0.6.apk
Size 1.2MB
Sample241109-ppldesvarh
SHA256 56fec181f0b43afa87d7cb76fbc5523ae788e5fed56356d5732a2f2b2cf6ab88
MD5 c7a2996b321266ee65a05265ca8dfc71
SHA1 8bebb56419b329f15065ae9908bfb26f59d91a2e
SHA512 63b6c9b37a5f1734a18e5dedfc1415bfc42f815afcef342cfac6f3bfb5fcffdcea7fe26ed0abb46b18fbaf905e196092ff3c7955e7d3e2dec0cd8104dacd2721
SSDEEP 24576:tdqbaAnGsPRwn4izoTu6tmkXYhafQTnHyxJhRwvarW6uMDT6nmtiS7bszq7K:tdqLGw6n4GujXKV7HyxJwvF46nmtiZqK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

android collection credential_access discovery impact persistence

Static task

static1

Behavioral task

behavioral1

Sample

Vencord-v1.0.6.apk

Resource

android-x86-arm-20240624-en

android-9-x86

5 signatures

150 seconds

discovery persistence

Behavioral task

behavioral2

Sample

Vencord-v1.0.6.apk

Resource

android-x64-20240624-en

android-10-x64

6 signatures

150 seconds

collection credential_access discovery impact persistence

Behavioral task

behavioral3

Sample

Vencord-v1.0.6.apk

Resource

android-x64-arm64-20240910-en

android-11-x64

4 signatures

150 seconds

collection credential_access impact

Malware Config

Targets

- Target
  Vencord-v1.0.6.apk
- Size 1.2MB
- SHA256 56fec181f0b43afa87d7cb76fbc5523ae788e5fed56356d5732a2f2b2cf6ab88
- MD5 c7a2996b321266ee65a05265ca8dfc71
- SHA1 8bebb56419b329f15065ae9908bfb26f59d91a2e
- SHA512 63b6c9b37a5f1734a18e5dedfc1415bfc42f815afcef342cfac6f3bfb5fcffdcea7fe26ed0abb46b18fbaf905e196092ff3c7955e7d3e2dec0cd8104dacd2721
- SSDEEP 24576:tdqbaAnGsPRwn4izoTu6tmkXYhafQTnHyxJhRwvarW6uMDT6nmtiS7bszq7K:tdqLGw6n4GujXKV7HyxJwvF46nmtiZqK
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Legitimate hosting services abused for malware hosting/C2
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoverypersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessimpact

© 2018-2026

Terms | Privacy