General
- Target Stampede_v4.21.1_signed.apk
- Size 793.6MB
- Sample260603-qvmdcahs4m
- SHA256 2516e7401fbf58cd3352519e6f291b55ba008e52a62109c0674f6bef9c015ac3
- MD5 4ac33f3f7315e676c5573680b3a82ba3
- SHA1 df8676259e03351b6d9c6dfe96b792cb250020e7
- SHA512 686423245f5109c0c7f65bda52b356cb1a8fb967e8b67297072ced6fa7a0ca9844f71f0c92f2e84fa3ef4d5e5266e82634e18ff413f0ccffb27ca858952497a0
- SSDEEP 12582912:rAPHE6jtVQcpE8H93th8QydgY30Omc8fVWNqK2FotDwiC:rAMopy+3tD5YWWNqK2FotDwD
- TLSH T1E9890405A648E50AD8215BB5F8C2CEBDBE35FC6CE619425772E03E3F7EB5658190FA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Stampede_v4.21.1_signed.apk
Resource
android-33-x64-arm64-20260325-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Stampede_v4.21.1_signed.apk
- Size 793.6MB
- SHA256 2516e7401fbf58cd3352519e6f291b55ba008e52a62109c0674f6bef9c015ac3
- MD5 4ac33f3f7315e676c5573680b3a82ba3
- SHA1 df8676259e03351b6d9c6dfe96b792cb250020e7
- SHA512 686423245f5109c0c7f65bda52b356cb1a8fb967e8b67297072ced6fa7a0ca9844f71f0c92f2e84fa3ef4d5e5266e82634e18ff413f0ccffb27ca858952497a0
- SSDEEP 12582912:rAPHE6jtVQcpE8H93th8QydgY30Omc8fVWNqK2FotDwiC:rAMopy+3tD5YWWNqK2FotDwD
- TLSH T1E9890405A648E50AD8215BB5F8C2CEBDBE35FC6CE619425772E03E3F7EB5658190FA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about active data network
Reads information about phone network operator.
Checks the presence of a debugger
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
6System Checks
6