Resubmissions

04/06/2026, 03:39

260604-d7mtesax3q8

04/06/2026, 03:37

260604-d6w1psax2q6

General

  • Target
    Android.VikingHorde.zip
  • Size 6.2MB
  • Sample260604-d7mtesax3q
  • SHA256 983ed48bf83a01127f6eb116f541965a686ca51b137d50bfa57ee056321ff467
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      viking.apk
    • Size 7.1MB
    • SHA256 254c1f16c8aa4c4c033e925b629d9a74ccb76ebf76204df7807b84a593f38dc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v16

Tasks