General
- Target ready.apk
- Size 3.0MB
- Sample260525-pqrltsa16w
- SHA256 92a1324ad9b9dc18d005096b76628d94981591ada8585b5af83758572113a481
- MD5 867789111895cd9560bb938b40df30f3
- SHA1 a8e269ddd74089cb9f88374af5bcedcdf82a815b
- SHA512 1f9c840f62473fd3531c773ef145676d62256503dd15f9098e20cd7f635fef90677d1dbbd52dc01cfc10caa9a043b13c5f39a274840b25fe3ddaa11190a9cf0b
- SSDEEP 49152:rf5keOIeTnl+TuDm8As2mzPzdGGOQTOc1cUoYqe0cgw3PH8fMj6fK:zGpToTuiC2mzPzBhT7H0tw3Pyy
- TLSH T13CE5D003EB45CA9BD4FA83F56F270DA92A070F68CA42BAD704557A7E2E771C10DC568C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ready.apk
- Size 3.0MB
- SHA256 92a1324ad9b9dc18d005096b76628d94981591ada8585b5af83758572113a481
- MD5 867789111895cd9560bb938b40df30f3
- SHA1 a8e269ddd74089cb9f88374af5bcedcdf82a815b
- SHA512 1f9c840f62473fd3531c773ef145676d62256503dd15f9098e20cd7f635fef90677d1dbbd52dc01cfc10caa9a043b13c5f39a274840b25fe3ddaa11190a9cf0b
- SSDEEP 49152:rf5keOIeTnl+TuDm8As2mzPzdGGOQTOc1cUoYqe0cgw3PH8fMj6fK:zGpToTuiC2mzPzBhT7H0tw3Pyy
- TLSH T13CE5D003EB45CA9BD4FA83F56F270DA92A070F68CA42BAD704557A7E2E771C10DC568C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
MITRE ATT&CK Mobile v16
Tasks
static1
bankertrojaninfostealerratspynote
Score
10/10
behavioral1
collectioncredential_accessdefense_evasionexecutionpersistence
Score
7/10
behavioral2
collectioncredential_accessdefense_evasionexecutionpersistence
Score
7/10
behavioral3
collectioncredential_accessdefense_evasionexecutionpersistence
Score
7/10