General
- Target sample
- Size 5.1MB
- Sample251225-pbq2rawnft
- SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
- MD5 f5b501e3d766f3024eb532893acc8c6c
- SHA1 b0913e8cbff6a9623cf97a3d4d796ec259e24df7
- SHA512 0339d753c75e06f947e73f7e82fdad187060557549f06c88deb7351b8ce36cf6e6e23d51da8534e92d16be41f267b12c2faac2a17372723e3e6862cdd9de3a24
- SSDEEP 98304:hTEhvllCLZBeUctfLlFXIFW/AwI8NtxYvlIP9p+WfbyIU+9Gyqpo/KrCkSL:9Ehvl0afLvXIYxplp3zMrSL
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
sample.apk
Resource
android-x86-arm-20251223-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.apk
Resource
android-x64-20251223-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
sample.apk
Resource
android-x64-arm64-20251223-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
albiriox
C2
-
194.32.79.94:5555
Targets
-
- Target sample
- Size 5.1MB
- SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
- MD5 f5b501e3d766f3024eb532893acc8c6c
- SHA1 b0913e8cbff6a9623cf97a3d4d796ec259e24df7
- SHA512 0339d753c75e06f947e73f7e82fdad187060557549f06c88deb7351b8ce36cf6e6e23d51da8534e92d16be41f267b12c2faac2a17372723e3e6862cdd9de3a24
- SSDEEP 98304:hTEhvllCLZBeUctfLlFXIFW/AwI8NtxYvlIP9p+WfbyIU+9Gyqpo/KrCkSL:9Ehvl0afLvXIYxplp3zMrSL
- MD5 SHA1 SHA512 SSDEEP
Score6/10Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Requests disabling of battery optimizations (often used to enable hiding in the background).