General
- Target Wink_Global.apk
- Size 94.1MB
- Sample260603-ncgn2aez7q
- SHA256 ede4dd0a0b5047cd9bd2ac57cb56ba91bc685a7ea5977e8217dc5f3c40790eac
- MD5 8226ce655e50a615f83ff56e3a182e38
- SHA1 5aa4cdd0da4eb557c735c9b06ab45af8207dcc06
- SHA512 9052317ee9aaa190a0f78cb2a9c901c31739e8fa86e157446117a717cdb05158ad5729886a641871ad0b8e91b3d8d38276999342de381f93c3b02f4e3d77cc60
- SSDEEP 1572864:1LdMgIX3AboH8ajhFZjGCzWYJGpKkqfOgOCVUy1U3QafTFYJM/JgOLwDwjfdLK:n5kHNjfZUYUBuUyqfTWu6mFK
- TLSH T1E7283353A349985ED47B12724E66373762484C449AD2F6E3790DB20C2BF37C89F09EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Wink_Global.apk
Resource
android-33-x64-arm64-20260325-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target Wink_Global.apk
- Size 94.1MB
- SHA256 ede4dd0a0b5047cd9bd2ac57cb56ba91bc685a7ea5977e8217dc5f3c40790eac
- MD5 8226ce655e50a615f83ff56e3a182e38
- SHA1 5aa4cdd0da4eb557c735c9b06ab45af8207dcc06
- SHA512 9052317ee9aaa190a0f78cb2a9c901c31739e8fa86e157446117a717cdb05158ad5729886a641871ad0b8e91b3d8d38276999342de381f93c3b02f4e3d77cc60
- SSDEEP 1572864:1LdMgIX3AboH8ajhFZjGCzWYJGpKkqfOgOCVUy1U3QafTFYJM/JgOLwDwjfdLK:n5kHNjfZUYUBuUyqfTWu6mFK
- TLSH T1E7283353A349985ED47B12724E66373762484C449AD2F6E3790DB20C2BF37C89F09EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Queries information about active data network
Listens for changes in the sensor environment (might be used to detect emulation)