General
- Target سکس ایرانی.apk
- Size 3.0MB
- Sample260511-m7ex9af191
- SHA256 52b11991a7f54f351fdc2d6bb80564840671c1d82f2b2d0c4df038f51708a62c
- MD5 aea3978f165fe143d60e2eb5d7f663fe
- SHA1 445a53c4246ed06a3aa58cf2eec17340dd223b46
- SHA512 2707316c9930f406a8090fc5313b49fb390e6f1385a143e046c220031a4cb619fff61e315be47c04d009a553a6ba369b224567532899199e9d846528cd887925
- SSDEEP 49152:xu7YWUcB/5d8wctdFUyBIcxmvPqO2HF4z29HKJyOTSgd5gMi9LBiNgfVVBD6+:2UcJ5dnKQy6wQPqOKA2vqSgd5gMKysp
- TLSH T174E5F252B3FA9A28F2F76F35E975519259B9FD829E35C11E0200B11C0DB7E809B50FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
سکس ایرانی.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
سکس ایرانی.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
سکس ایرانی.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target سکس ایرانی.apk
- Size 3.0MB
- SHA256 52b11991a7f54f351fdc2d6bb80564840671c1d82f2b2d0c4df038f51708a62c
- MD5 aea3978f165fe143d60e2eb5d7f663fe
- SHA1 445a53c4246ed06a3aa58cf2eec17340dd223b46
- SHA512 2707316c9930f406a8090fc5313b49fb390e6f1385a143e046c220031a4cb619fff61e315be47c04d009a553a6ba369b224567532899199e9d846528cd887925
- SSDEEP 49152:xu7YWUcB/5d8wctdFUyBIcxmvPqO2HF4z29HKJyOTSgd5gMi9LBiNgfVVBD6+:2UcJ5dnKQy6wQPqOKA2vqSgd5gMKysp
- TLSH T174E5F252B3FA9A28F2F76F35E975519259B9FD829E35C11E0200B11C0DB7E809B50FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries the phone number (MSISDN for GSM devices)
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Execution Guardrails
1Geofencing
1Foreground Persistence
1Hide Artifacts
1Suppress Application Icon
1Tasks
static1
Score
6/10
behavioral1
bankercollectiondefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan
Score
8/10
behavioral2
bankerdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan
Score
8/10
behavioral3
bankerdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan
Score
8/10