General
- Target sample
- Size 5.1MB
- Sample251225-pbq2rawnft
- SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
- MD5 f5b501e3d766f3024eb532893acc8c6c
- SHA1 b0913e8cbff6a9623cf97a3d4d796ec259e24df7
- SHA512 0339d753c75e06f947e73f7e82fdad187060557549f06c88deb7351b8ce36cf6e6e23d51da8534e92d16be41f267b12c2faac2a17372723e3e6862cdd9de3a24
- SSDEEP 98304:hTEhvllCLZBeUctfLlFXIFW/AwI8NtxYvlIP9p+WfbyIU+9Gyqpo/KrCkSL:9Ehvl0afLvXIYxplp3zMrSL
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
sample.apk
Resource
android-x86-arm-20251223-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.apk
Resource
android-x64-20251223-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
sample.apk
Resource
android-x64-arm64-20251223-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
albiriox
C2
-
194.32.79.94:5555
Targets
-
- Target sample
- Size 5.1MB
- SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
- MD5 f5b501e3d766f3024eb532893acc8c6c
- SHA1 b0913e8cbff6a9623cf97a3d4d796ec259e24df7
- SHA512 0339d753c75e06f947e73f7e82fdad187060557549f06c88deb7351b8ce36cf6e6e23d51da8534e92d16be41f267b12c2faac2a17372723e3e6862cdd9de3a24
- SSDEEP 98304:hTEhvllCLZBeUctfLlFXIFW/AwI8NtxYvlIP9p+WfbyIU+9Gyqpo/KrCkSL:9Ehvl0afLvXIYxplp3zMrSL
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).