General
- Target Qatana.apk
- Size 249KB
- Sample260603-pgvxwsew7x
- SHA256 7ba9d4e4d144a4908fe4950346868442cf9869ae8ea78ab97656a53496ab4343
- MD5 5c341f3ccb435586685554639db57958
- SHA1 4bd2e3acc4d2c0212521b7a86c9bfb8f13472727
- SHA512 fe173f98494f159a643015828913e67586dca93ff1f39cb9c46bdd63d53ab07e5aa9ccb35e8471d8d4d1a6bc29da37d709bde82da6363a52f98a4042c68dadbd
- SSDEEP 6144:VOfvpgm1YQzn1YQzeJOjPJOja6Caa/6CaaJEOd0kCC1poioAEOd0kCC1poioC/:VkgGzbze6WCHCCHJEOQaZEOQaL/
- TLSH T1CF44126386D1BD3EE4F9D2BD455407890A45E6F3E7A73611B819023C2B7ADD03E2D278
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Qatana.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Qatana.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Qatana.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Qatana.apk
- Size 249KB
- SHA256 7ba9d4e4d144a4908fe4950346868442cf9869ae8ea78ab97656a53496ab4343
- MD5 5c341f3ccb435586685554639db57958
- SHA1 4bd2e3acc4d2c0212521b7a86c9bfb8f13472727
- SHA512 fe173f98494f159a643015828913e67586dca93ff1f39cb9c46bdd63d53ab07e5aa9ccb35e8471d8d4d1a6bc29da37d709bde82da6363a52f98a4042c68dadbd
- SSDEEP 6144:VOfvpgm1YQzn1YQzeJOjPJOja6Caa/6CaaJEOd0kCC1poioAEOd0kCC1poioC/:VkgGzbze6WCHCCHJEOQaZEOQaL/
- TLSH T1CF44126386D1BD3EE4F9D2BD455407890A45E6F3E7A73611B819023C2B7ADD03E2D278
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC)