General
-
Target
dropper.apk
-
Size
4.7MB
-
Sample
250107-z1kldaymfz
-
MD5
72a00302ea4abff775a0f5d64aa163d5
-
SHA1
a60c8d0605986f7069e36d637cbd001309801cb0
-
SHA256
94694e56c6d22a0115a3dc615597f5e24a5f844fb5a250a4b71f673cfc2d0d02
-
SHA512
30bd913dea1040f43890de4580c2ca6e2381fab87f2b962f38fd94a5184cea56c04fa29242c42bcf774120a97069dcc61fb1036f085d192f6428b869a6315985
-
SSDEEP
98304:U3mUMdkaoLKauoycvBMORRsc96MmXXYWL9RtNFk6P+xvDfDdI:U3mUEpauoFZf0c9pYRRtNH6lI
Behavioral task
behavioral1
Sample
dropper.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
dropper.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
dropper.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-20240624-en
Malware Config
Targets
-
-
Target
dropper.apk
-
Size
4.7MB
-
MD5
72a00302ea4abff775a0f5d64aa163d5
-
SHA1
a60c8d0605986f7069e36d637cbd001309801cb0
-
SHA256
94694e56c6d22a0115a3dc615597f5e24a5f844fb5a250a4b71f673cfc2d0d02
-
SHA512
30bd913dea1040f43890de4580c2ca6e2381fab87f2b962f38fd94a5184cea56c04fa29242c42bcf774120a97069dcc61fb1036f085d192f6428b869a6315985
-
SSDEEP
98304:U3mUMdkaoLKauoycvBMORRsc96MmXXYWL9RtNFk6P+xvDfDdI:U3mUEpauoFZf0c9pYRRtNH6lI
Score1/10 -
-
-
Target
base.apk
-
Size
3.5MB
-
MD5
fa8d37206d1d58c9803a01aca091a40f
-
SHA1
31d828b8fc6d0286eb2cb56ff49a464ecaf4c4e4
-
SHA256
2bf76945694c257d9bb1533c70075fbabce2d8671b476b7478421389ed258980
-
SHA512
f711906fc415bb67c1820bbf1b2f07cbc7d3a5ba59ddcbc1d94e3c490dd4bcdd9949ad4e68681150d627394de93a37fda2a02cf01aceac14f9db602656cf6371
-
SSDEEP
98304:D1y8VlJ807H8/jRRb4A1RtZLrqOfLDcjzn:Zy8V386H8PbptZL3zDc/n
Score7/10-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator.
-