General
- Target a812545aa9a5ab24a651890295ab43e45bee334630f97875e6dafbab28849a06.apk
- Size 14.4MB
- Sample260510-xts8tsgy7j
- SHA256 a812545aa9a5ab24a651890295ab43e45bee334630f97875e6dafbab28849a06
- MD5 0ffbd8430f11c007c88bdcc6d67ed0f6
- SHA1 d7e178c1fcffb23ecad355200ad7bfa3d11d4dd4
- SHA512 e3036e8549941c9d1a27d9d1803e458ecae4b27755e2f2bec7f0f5723c32707e45f1da29f9927b3a3aabb34d5c135768e42dc59d648f815b54d735f4129553a4
- SSDEEP 196608:qHYmS1uSbcZ4nY6H2PNIRQbnI4swfFjkqWs5WYpzDe//e2+7Z5qwGVWlDSi+:q4mNocOnH2PuRO7HWYpS/zcVKWlw
- TLSH T187E62397F798992FC47740F2996E9771518B4D028E839B476E54330C2CB75E82F8ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a812545aa9a5ab24a651890295ab43e45bee334630f97875e6dafbab28849a06.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
ghostgrab
C2
-
https://accessor.pages.dev/
Targets
-
- Target a812545aa9a5ab24a651890295ab43e45bee334630f97875e6dafbab28849a06.apk
- Size 14.4MB
- SHA256 a812545aa9a5ab24a651890295ab43e45bee334630f97875e6dafbab28849a06
- MD5 0ffbd8430f11c007c88bdcc6d67ed0f6
- SHA1 d7e178c1fcffb23ecad355200ad7bfa3d11d4dd4
- SHA512 e3036e8549941c9d1a27d9d1803e458ecae4b27755e2f2bec7f0f5723c32707e45f1da29f9927b3a3aabb34d5c135768e42dc59d648f815b54d735f4129553a4
- SSDEEP 196608:qHYmS1uSbcZ4nY6H2PNIRQbnI4swfFjkqWs5WYpzDe//e2+7Z5qwGVWlDSi+:q4mNocOnH2PuRO7HWYpS/zcVKWlw
- TLSH T187E62397F798992FC47740F2996E9771518B4D028E839B476E54330C2CB75E82F8ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).