General
- Target 0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
- Size 10.6MB
- Sample260601-plbptady2q
- SHA256 58ce1c37cbcd0bbb2797953580da56435654a2aa9c2e0480e1548270e2375095
- MD5 ffd7cddb5673c4659bc91d2e0b4ac8b9
- SHA1 cb31ec736764045f824731631d2e98493bd7899a
- SHA512 1e06de4d8dcd60dc0d8d8de8fb615fdbce2c9648361c764c96a32790226a264a24ce711c73950e76942bce72aa453dc63818d4d3bb3a5804cf61d8a20a2f7de6
- SSDEEP 196608:0Wozqi/H6Hl7iQrDm3GB6BLd1APuzdsnzZNTN0weJNkK0K7p+KKgB:bC+l711B6/2W6zfO9kdEB
- TLSH T148B6F1C6F7589F2EC47745724C5E033A2A6A4D2ACB43A7476A44375D38B31E80F49BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
- Size 10.6MB
- SHA256 58ce1c37cbcd0bbb2797953580da56435654a2aa9c2e0480e1548270e2375095
- MD5 ffd7cddb5673c4659bc91d2e0b4ac8b9
- SHA1 cb31ec736764045f824731631d2e98493bd7899a
- SHA512 1e06de4d8dcd60dc0d8d8de8fb615fdbce2c9648361c764c96a32790226a264a24ce711c73950e76942bce72aa453dc63818d4d3bb3a5804cf61d8a20a2f7de6
- SSDEEP 196608:0Wozqi/H6Hl7iQrDm3GB6BLd1APuzdsnzZNTN0weJNkK0K7p+KKgB:bC+l711B6/2W6zfO9kdEB
- TLSH T148B6F1C6F7589F2EC47745724C5E033A2A6A4D2ACB43A7476A44375D38B31E80F49BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.