General
- Target PhoneDashboard-Agent-v5.5.117.apk
- Size 52.3MB
- Sample260602-ymc4psdv9z
- SHA256 bacb880f60911b65ff411376a3787b4c45fdb3bc7708d22b7d3260b1c94cdc3f
- MD5 f9535053e1709dde17a9dcc0836e64a5
- SHA1 ae048bf3ed4a0bb74876e5f6277a2224a761e7ab
- SHA512 42acb657bf834601951ce81746166d2d3dc8a65395de5ec6403c57604f4ad185251c0bd667bb97f34830728335302b41b8094a73923f47c39ceece7d500326f4
- SSDEEP 1572864:VTCKw6mfbtHqwBIGUIHFGft9GilBkTYJby0TYp:VTC16DAIrIHgl9Glj6+
- TLSH T19FC7339AE7A89E3FC83380714866667267478C11CE879F4B2944371D75B72E40F8AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
PhoneDashboard-Agent-v5.5.117.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target PhoneDashboard-Agent-v5.5.117.apk
- Size 52.3MB
- SHA256 bacb880f60911b65ff411376a3787b4c45fdb3bc7708d22b7d3260b1c94cdc3f
- MD5 f9535053e1709dde17a9dcc0836e64a5
- SHA1 ae048bf3ed4a0bb74876e5f6277a2224a761e7ab
- SHA512 42acb657bf834601951ce81746166d2d3dc8a65395de5ec6403c57604f4ad185251c0bd667bb97f34830728335302b41b8094a73923f47c39ceece7d500326f4
- SSDEEP 1572864:VTCKw6mfbtHqwBIGUIHFGft9GilBkTYJby0TYp:VTC16DAIrIHgl9Glj6+
- TLSH T19FC7339AE7A89E3FC83380714866667267478C11CE879F4B2944371D75B72E40F8AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Acquires the wake lock
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries information about active data network
Listens for changes in the sensor environment (might be used to detect emulation)