General
- Target 250909-qggkyabtla_pw_infected.zip
- Size 6.8MB
- Sample250910-cchqjsan8s
- SHA256 03c3827dbf932652d75c0c7201a22d539e13292c5087580e552fe085a5dca5bf
- MD5 6730236b0217764989012286b3c98420
- SHA1 1ad6fb1b285eeb6a58ad7764c212292fda16428c
- SHA512 7f9bfa347f6247680834c2812d3d83f10a25f5ac86f08f459a046e335c66fcd1bf18f6a7f86b01ce3102dfc534c57213ce2dd7cfe7c7742a3a4d90bec0fff12e
- SSDEEP 196608:uGctt9lcGa6joHkOpqPu/ARdy9gVOBYsFkzkQYY/g3OU0:uGYlZa6joHkOpSu/AqBYgwkQl/p1
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x86-arm-20250619-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x64-20250619-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c.apk
Resource
android-x64-arm64-20250619-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c
- Size 13.1MB
- SHA256 bba15ecc8404698530761a122d3f03310b5e775f2e1552b645135fefd27e625c
- MD5 d6c39adf65a3af9f98fd6ab17629e2c0
- SHA1 7f39cf5e2bb0a30993ed467d5014f0e216daa2cd
- SHA512 e490d66e459f18bbac71e66fb93f6aeae35661c8a3cc1dfbd06ba2e8fbb5a173d6750f425c7ade9f1c57caf91948ce6d5b300609b53c5c651c729ec93c615a37
- SSDEEP 98304:QAL7pPYkdy3xjRmHmMqthmI3FJgHUnRkG+NUFuJfEk1FcMqpaFgKP97sC0ECYM/G:ngui380nRJPAJMk1WMqpaF7xAKl
- MD5 SHA1 SHA512 SSDEEP
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Queries the mobile country code (MCC)
-
Requests allowing to install additional applications from unknown sources.