General
- Target 22betLoader.apk
- Size 35.1MB
- Sample260505-pd7saaa19k
- SHA256 4098868a7428f9f4923d71af8f9ae66490ba5eff9e60c16245d8bb62c1780cfe
- MD5 c171356994f4f4f21cd43d4de674b1c0
- SHA1 2d946bedeb84a13cd0740190993522d5d1e59c9a
- SHA512 73a582346660d2f3e814711d6eb5c5a2889f76c43fe3ada21aea987472380b0628aaeadf9a9376ffe4df18086c3f9aeeadb8cb0301825b7563c84836ace80bae
- SSDEEP 786432:s+mApzQ9sGhA8eoiDVjpW360zbEHlZJ+d/Sa:6KzvGf/wVjpWq9FZJ+7
- TLSH T10B8701556248946BCC329D36481D3936AB893D7AFE92E3D3A80D771C2CF3AF043499D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
22betLoader.apk
Resource
android-x64-arm64-20260325-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 22betLoader.apk
- Size 35.1MB
- SHA256 4098868a7428f9f4923d71af8f9ae66490ba5eff9e60c16245d8bb62c1780cfe
- MD5 c171356994f4f4f21cd43d4de674b1c0
- SHA1 2d946bedeb84a13cd0740190993522d5d1e59c9a
- SHA512 73a582346660d2f3e814711d6eb5c5a2889f76c43fe3ada21aea987472380b0628aaeadf9a9376ffe4df18086c3f9aeeadb8cb0301825b7563c84836ace80bae
- SSDEEP 786432:s+mApzQ9sGhA8eoiDVjpW360zbEHlZJ+d/Sa:6KzvGf/wVjpWq9FZJ+7
- TLSH T10B8701556248946BCC329D36481D3936AB893D7AFE92E3D3A80D771C2CF3AF043499D9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2