14dc6d03b65680a988349ffad620b27f586966cb35f5e8f5346dffd99e018e3b

Resubmissions

07/05/2026, 04:07

260507-ep3btsex6v

07/05/2026, 04:05

260507-envklaay5m8

Sharing

Copy URL Twitter E-mail

General

Target
UPINSTITUTION_1.3_APKPure.xapk
Size 35.5MB
Sample260507-envklaay5m
SHA256 14dc6d03b65680a988349ffad620b27f586966cb35f5e8f5346dffd99e018e3b
MD5 19a03b48e04949daa75b486b108871b7
SHA1 a962b41d06d44987d9559cea9800f188c9f82e88
SHA512 632b173d26d9aa53c26a6da07de8b506e02c0f42fec33ddcb2c5b519c35173f1ca31399878bd47c2287349343065a8cc86c9b6f60b2c30854c14d977cdcc4bf0
SSDEEP 786432:EGD0iDeit31iOO0a0bzIGKj0l8wHCbRfsrM:EGDJDem31zO0NzIGPl7Cb2w
TLSH
T15E872382F748839FE87B47320C1ED6648B522E4706927BD275E477082B772C4BF96786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  com.lodhi.apps.savetheballoons.apk
- Size 34.8MB
- SHA256 03dfac1610e8d0adc7260fd5c069e860ea3ce77b2d31464835191eadd304a2c7
- MD5 1bf74a6a84f170001aa550fd205d532f
- SHA1 23e7b13e0cbda96c6ed6479bdbd766b4b980e1ba
- SHA512 88548917b97ef3561081a18d127ee4698e5bd1165f444e22e011444625bd8402bb17a698e2c21bbdb3238ae74f03025b9af948e940ffbeae9389508d89469c07
- SSDEEP 786432:bGD0iDeit31iOO0a0bzIGKj0l8wHCbRfsrv:bGDJDem31zO0NzIGPl7Cb2L
- TLSH
  T1E9873386F35C839BE4675B720C1EC6688B823E4706937BD174D5B7082B771847F9AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1
- Target
  config.ar.apk
- Size 36KB
- SHA256 0591b1f8c7613e5d677445ee69ab4dcbe30cfbc98a421163d4be19e7806fc8fa
- MD5 ccf2f3e26932183ddaffaa145f0685a9
- SHA1 ab394b1b38555f9a328d4a10724eb08ab0ff3d8c
- SHA512 2eccc17f49db2a4fb8dd4a82659c3dd751d51996783a653d7b5fddd0f24add6ad6aa3f5f6cc02024dcae3fba0448a4a3bc61e784a78f2e3781c1e003ef856efb
- SSDEEP 768:T+a2dI6QZuQ4FshW7w1eNiTxPctRuHsnuo:T/2dI6QZuQ4FshW7nsP8z
- TLSH
  T158F23A925D608413CF7B8A36D5D2F069D9326E125C82FC11AAA072081AF7BD297C737C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  config.de.apk
- Size 32KB
- SHA256 3152437aafece04fa003e45f461c416c13b069fce2e6291b67a9c1794b2fab4a
- MD5 1ef16e2996decf4dde911191759a4766
- SHA1 ff9e1c734eda73501724cef8ef62b35f7ac38c5a
- SHA512 909fae7fec3ec7a767239358c215c37316a664f17b87523f803867bcdc94d793fd430952ab2c8b615c632ebb5d573e9839bf7b6e90b8a9813ee49db7b729ac54
- SSDEEP 384:zTcgPvzq6tIUKRchrFshW7w1eNiTxGw24oLtovwc4DANIHVepjvavruc:zTcE2U7FshW7w1eNiTxhoc4DA2KjyDuc
- TLSH
  T1B3E24C46AD829603CF7F46312C93D9666D374F055D828A06AAF0790C29B7BD39B973CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  config.en.apk
- Size 52KB
- SHA256 04381af840e16f8f2a3daa6756dd4c4d4070324f1dcfaf1b3c6e7b95a45b1ccd
- MD5 143696fe7e897cbd93fe166640316011
- SHA1 9b78c99a05f3db8a153a99178cb01c20002b9acb
- SHA512 506bb160c71c41d313c1992e802cf69ce945b66370f173c2bd185fd4ac588cbaa3308909735e387e8b40f4cca39cff9ee4d32dccbe3306522a2401daa09a9bbc
- SSDEEP 384:+/URqlSFiEoIchrFshW7w1eNiTxSUse0slyN2s7ks76zcqWN9n/zJd2HV5Mls+E:waqc2FshW7w1eNiTxc4AdNtzJd2rhX
- TLSH
  T126331946BF40561FCD3B01322C97D6616926BE47DD468607E5B0710C2ABBBD19F863F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  config.es.apk
- Size 44KB
- SHA256 491d4f2b31a86d797b2d0b1b391b079f23c01aca9cd39c807753c23448ef40fd
- MD5 6e1a6760e988fee7ca7a5adaa701ac88
- SHA1 1d7eae2846692a80d5d1e92019efd85e78d20766
- SHA512 a1a4d828c68195a72570131ba2abc3fcf22921a45b3dda82668bbf0efa2809257542e51a8558211c55fc62646c1aa7ac9ffb0fa5b42e39afc6d647e8a1f83fa4
- SSDEEP 768:e/g5u6a7lkYFshW7w1eNiTxKAgmHKE8LAxojaj9:Du6YlkYFshW7nsW8KUEa
- TLSH
  T1EB132912BEC05A13CD7B42756A87C223653E4E142D46D507AAA8731C32BBBF897927DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  config.fr.apk
- Size 40KB
- SHA256 f0cf7bcb76c54f02b0d33eb24c81e2922c8cd235e66b93f49b69fed39655e33b
- MD5 cee2d8c480d2d1588437d2caebd3d5c7
- SHA1 a5e6f7742289e9701fa0349c3c25708cdbcf90eb
- SHA512 b450d0397c1bd1eca63fbdd565d6709e40af523e758c30b90137ab61d615d96922abb9337d0981d0f83982d63e48883fe82082f8f3bcc9eeeee08dc665a99e5d
- SSDEEP 768:wCZxA7S2j4SFshW7w1eNiTxTVdJHhJV8YFs2RO7qT9uJ:w+K7l8SFshW7ns3Zsh
- TLSH
  T1BA03094AAD816643CDBB06717D67D116993D8E4D6E81C601AAF0720C3ABBBF587833CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  config.hi.apk
- Size 36KB
- SHA256 8c389daffb905e1032e545b6ef0f0724a10cf7857c1c68b435dc48328289489a
- MD5 dfa6f8a8e021e965ad755abc5aedf2e5
- SHA1 ca0d895f1cde0e189790c11ad029bf3bcbde23d3
- SHA512 e6065939b792ade73d27cefade75d8ef9cac4c506a4cb1802d2b1b77f44a984c1dedc6f3b60103f3b80ed7187480e525a5e14a856460072dc01feb4fca2ec899
- SSDEEP 768:sWQhU/E/Jq9OC9xSPbmS2BFshW7w1eNiTxY5nv7DxuI:snhAE/Jq9OC9xSPbmS2BFshW7nsU
- TLSH
  T188F2E84EEFA9B693CDBD38753A968876C5352F3067D14202949072CE94B7EF01BD2389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  config.in.apk
- Size 32KB
- SHA256 5825a9a5ea408ec6562e536bb9ffdf2252fdfac53e7f4e01069992662507a734
- MD5 addb7667cec4274afb1a69a2a3ed28e3
- SHA1 5751c754307f2acf31c51af90666c7c0b266e243
- SHA512 6782ef69ce777b88fc17bd7968006bbe2e0a349a6bcdbd3e6edb1b271459a36dd6262b16bd9f6fe4c7899f3dc84bb632885cbf4a5ffeb7833219ebb94968518d
- SSDEEP 768:B4u6upUFshW7w1eNiTx8jN4xfHPvChbZuzh:B4u6upUFshW7nsWoH6bwh
- TLSH
  T19AE25C479E40A607CE7F46725CA7D8262D360F5A5D818706ABE0761C3AB7BC25B833CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  config.it.apk
- Size 32KB
- SHA256 1663d63eeaaaa86e5bcb328a8a31290cffff3625c05c7a2334a14267aaaff1a1
- MD5 4bc76b35a9d44581b562782e24135d80
- SHA1 75c7f6d2f3e133663b1d431693eb6208ce4daad3
- SHA512 277e727024a43f0e526c59d6dc5f7873c80b0d0618aa963c5bad590939380fab8b08d761d95a447f774943a06112ba0e5543a16f33d7a2acc3307753d8d5716b
- SSDEEP 384:uQhinv4Y+BVYSlhrFshW7w1eNiTxOXPfwgBD9BLGG7PALpaxK6vHVbJ+k:umin7+BdFshW7w1eNiTxWGjNaxZzn
- TLSH
  T160E25B56ADC09503CE7F82395D97E4556A324E485CC29A02DAE0760C3AFBBD1A7D238D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  config.ja.apk
- Size 32KB
- SHA256 e89e880b895c7762da48b3182d9ea81ac72d46db606220dd14c05fb3b2bf9d6e
- MD5 90ce6be3e41492eafcbb7c82aa81cbaa
- SHA1 379b42fad6e7ed73dfced5421f687bbe8b28b0d7
- SHA512 45a01672ac996dcdc110238d0495b14799216c36848077912dc41ffd3c112743d41db7b80bbe6ec28a78d2b9a763d22a0dde61fc759ac153636cfaaa1c09f8f0
- SSDEEP 384:Pj4RFzebroDNhrFshW7w1eNiTxOPgoPrIQp2X2FgC+ZHVg1RuZluO:b4unoDXFshW7w1eNiTx892kgC+ZiGuO
- TLSH
  T1F7E22A4EEA809913CE7F42313CAAE56159328D49DCD2970196ACF10C6AB77CED7913BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  config.ko.apk
- Size 32KB
- SHA256 23d18b8630747ca593a292fde8bd935b044f2581f728b2b77eed89c2ed296938
- MD5 35eef9311584a3fc5b0158f87e99e5dd
- SHA1 0ed6b1ef8dd4407d594da629e1b780b78334e8a3
- SHA512 1ff13b5f3b43690490538566ac38c478b312c7e35adb3e32f30563468bf98df3bb5f54a5a32034376a23bf401b63ba37b693a6dd6137366a734f600dddb81638
- SSDEEP 384:sQ+jCA13TihrFshW7w1eNiTxH/6rMWTohSyG40HVHQIlIcuF:sz/3cFshW7w1eNiTxITzyGrRDycuF
- TLSH
  T192E27E86BD82AD13CDBF45751CD6D52499324F095E824602FAE0B60C6AF3BC28BC63DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  config.my.apk
- Size 40KB
- SHA256 34b4823e7ec6a5039250cff49011bc796613bf505e0ebba4455ded2f9693503a
- MD5 5f35ffcae745674a30bbbbc0fe95dad7
- SHA1 a17202bcadb2de5f68b2c019b91ad550a49e4f71
- SHA512 f8ee5558103b1397fd77cb28e17f6c2ed5c42af386e395458749e465eb32b29efaafbd42eda99d3a72139b4c58513b5b4bf298b88798745dbd72cd0afb9fa6eb
- SSDEEP 384:I8OqwnegdVoWhLCEhuwhrFshW7w1eNiTxP9GqMgkYYhezmKmgmdHV2tuW+x:Slegddhu6FshW7w1eNiTxOGKKmJdge
- TLSH
  T12003B3415D49A40BEDBDC93A0EAE9A753C7B4E040A408841ABB034DF6E7FBD1D3A1769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  config.pt.apk
- Size 40KB
- SHA256 f246804d7636bc22074d52d20a289c57fdd0bf0c1ac5747252bbe0bd34e477b6
- MD5 0378819af74004e2f5d4e90084bca6a7
- SHA1 d7ffd89d5e14e3953e4d7fd2ba86e8af02dc617b
- SHA512 5a06a6c92134f59ca6690dfdcbfca6e80bb7b3e106b6dfb4f089bdb6971fd92fc84dd516c545adea272b8c9daed3799541f1a6c340c02a7647b305cfe8e3d658
- SSDEEP 768:D9fXMZ1oFshW7w1eNiTxTa9qD9205Rlvz:D9fcZ1oFshW7nsG65
- TLSH
  T1F1035906BEC15A23CD7F42702A97D612192E4E055D46CA07ABA0770E36FBBF197923CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  config.ru.apk
- Size 36KB
- SHA256 bbf64a07f6c21971ce0e12305135e112f01b58037f96bf86798b7bb1f96b9bf5
- MD5 92bbec26d261735218afa6c8011e65c8
- SHA1 ab400bbe9325c122a54397f1bef4daffd41cd1e6
- SHA512 aa38cb9cdd3575ba4c2499759821a6c570ced8b1e6fa5ac7f7d9d95417bfd3385a851a0482362dc210db01ca383bb3d61e303d866298568bd7be14d71251cce8
- SSDEEP 384:D8BQDDuhg/hrFshW7w1eNiTx6lKigtWyMBGLmeofd7HVWT1+f:D8BQDDuhgdFshW7w1eNiTxlof9GE
- TLSH
  T110F22866A9856547CE3AE03AEC05ED193C360EFD2E8A470269B03D1C35F37D287A634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  config.th.apk
- Size 36KB
- SHA256 1a6b7e20c8e32f043e5aaf74d1dbbfead0e0bfaf193f7df9d72c3bca3a51b02d
- MD5 b81e06f48e6ccf62719f0021e17ba497
- SHA1 7c29044567eec6ca3ac5798a266890bb406a5435
- SHA512 b30442f0cb65df1d98b40ef60ac59f533855844beacd94e7c9a461c8d8db377be9a6082dccfaad4c70af457a7bd57f890a4b3ab83d5e7b0db26bfea773567f9f
- SSDEEP 768:UnOMuxwCPT5oaT5FT5CG9WqinkA5d0535p5V+ht80Iw5fXCHNS9t7KFshW7w1eNC:UnOJjGgZHG3IFshW7nsAfq
- TLSH
  T10BF22AA379429903ED7A0A362D6AF2955A358F443EA2F8D055D4300C76F37D28722FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  config.tr.apk
- Size 32KB
- SHA256 374992e3209093815b6ee4388581f3124d5b47cf4c083c064f2dd0240cf6bb7a
- MD5 d01099960e890ee8c29ec089d33f904d
- SHA1 4570140b0437435f22165c2f6f2460a731c56612
- SHA512 c52c97e289ed22d1f45b4d5df4ae7bfd15e8f0fbe9c2a83df5736a28e83b0ff066581e43f4ec2df8d8ef7f2bd3260efcb5654ef88b5769b046cd65fbf41cef9e
- SSDEEP 768:d4U2mNReFshW7w1eNiTxMLWRXvVgFgJtb:demNReFshW7nsIWN
- TLSH
  T1F0E26C42AD555507CEBF42766CE2D626A9330F4469519902EEB0760C3AF77C38BD338D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  config.vi.apk
- Size 32KB
- SHA256 3df7399da24041d45e39fbd370c00b1f9ca2714cd7e072909e4e7cbc228877e1
- MD5 675f929aacbd6295b2cfff9560a5feec
- SHA1 280fc37c94b08690d599638d301f045de5b3c068
- SHA512 26529491762391c6d6502a8a4769fd45005d98026068bc09cfbd07ca2ddd79bcde93e1a31d5e4b5df58a3e0bd9cbaa1790ca6e267efe064f0a3f4e76a309dd2d
- SSDEEP 384:6CsnQfA+9A/5ZhrFshW7w1eNiTxt0pV75q+dCGgHVBuE:Ns9xFshW7w1eNiTx/+dC7HuE
- TLSH
  T14CE25C439AC0A403CD7F46795DABD4156F324E18AB81DB02BAE0751C7AB7BC25B923CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  config.xxhdpi.apk
- Size 73KB
- SHA256 2dd5aadd1396f11dd67cf96f988b329d65d7daba6c031499230b1a1e47b032bf
- MD5 c2ef9f9e5c9ee86a0573555bf748ae30
- SHA1 c5f42396e1e7cc2a9f2eefb10119029703573bf2
- SHA512 d135a524bce82000960d94753d1ee995efed9fa03d2320cb9ffe7f2901e1c0616c3a75c2891bec8fcdaf5df204b872dd38b31d5896555f76a75be1a2281ccb4a
- SSDEEP 768:hPKKJ/o/2EFeJDyy21hLcDilPy1mU0bLMqgZo4pgXOh/wK9zgRyeuWC:hXho/2EFeJp+LcOU0bLMq4o/u
- TLSH
  T1AF736CB3F368E82BD867C23583FD4A6BD9540E909859F3195E19F60D9EF3A858940FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  config.zh.apk
- Size 44KB
- SHA256 46cdb4ee6b36625b3b27ee4613a8a163fc74eb24a303f6d4d09138ef41a1ee22
- MD5 d1c442ac437f1a496019959981e1c7bf
- SHA1 d7b953bbd4de76f725f6ea84c5aba6e99422161a
- SHA512 2113f38b461de4af03b2ad53e33628834d781417fc6efd7a7ae85661160e4f34b2aabdcc5c6b85898b2ad18e66d5d197586a46c56ed2d5996140ebf21b1d877b
- SSDEEP 768:q824LmuWRFshW7w1eNiTxO0IWvMJTwGq8/:32pDRFshW7nsreqW
- TLSH
  T1B8132A57FC52DA13CD3BC079699BD226152E4E045A438E0AB9A4760C39BFBF55B823CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19