General
- Target sagawa.apk
- Size 3.1MB
- Sample260522-d5th7adv8n
- SHA256 99111c755c814887337f7b7845fd69ae1167a09dc16b9e9b65a7ea6467b52e16
- MD5 9a1eda54229dcbaeafe78d5f9d257271
- SHA1 cb557a382951820f5f1c15119798dd2d7b0bf1a2
- SHA512 9e4919774a3f0025857c14cd1c432520b3f54a314bfd75613269e9f1e80a99c4d099359c85b940c3944ec9adf04c88f95ea87015d63875d3e43e831140eee843
- SSDEEP 49152:mmoJZ7BYwRmv1EtnxYs7uSFAZsL7md4xVb8/e2ztk8rU0Tj9R932Hpoof2WT3htI:EZ7psvKtnxY2lp0Tjxhof2W1tjM
- TLSH T1ACE5CE82EFD5DE5AC8F7533709379636501A4C2D874392839ACCB77828B76E00EC66D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
sagawa.apk
Resource
android-34-x64-arm64-20260325.1-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target sagawa.apk
- Size 3.1MB
- SHA256 99111c755c814887337f7b7845fd69ae1167a09dc16b9e9b65a7ea6467b52e16
- MD5 9a1eda54229dcbaeafe78d5f9d257271
- SHA1 cb557a382951820f5f1c15119798dd2d7b0bf1a2
- SHA512 9e4919774a3f0025857c14cd1c432520b3f54a314bfd75613269e9f1e80a99c4d099359c85b940c3944ec9adf04c88f95ea87015d63875d3e43e831140eee843
- SSDEEP 49152:mmoJZ7BYwRmv1EtnxYs7uSFAZsL7md4xVb8/e2ztk8rU0Tj9R932Hpoof2WT3htI:EZ7psvKtnxY2lp0Tjxhof2W1tjM
- TLSH T1ACE5CE82EFD5DE5AC8F7533709379636501A4C2D874392839ACCB77828B76E00EC66D9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the MMS message.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1