General
- Target 1.apk
- Size 4.3MB
- Sample260604-pmkdcafx5q
- SHA256 2f914530948bc8f2f3566f98e79620b4e358a81902fd9f9d19f69f6c74c3d706
- MD5 d87afcb8811f86e245983158ccc070f2
- SHA1 b55167f07b23a7e80722445112a8ab484e6ef697
- SHA512 66c47d97e56f79e08b086be701aaca705f303b2527779ce0ccfbc5b459b4c4853b5bbf05b71e19a87efd524c5c3387b8615e549306270c3217dea9e05a7d2c2a
- SSDEEP 98304:zvDTpSuRGCemJrj4IqHd7rlfgpkQnUc7wW1RBkLfrZUDUnM:7DTpS4ZJIIK7rlrQUC1RinM
- TLSH T14F260286F32DA03FD5B781378AB6037266960C0940A6EB231659B31C6EF7E405F59FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
1.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
1.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
1.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target 1.apk
- Size 4.3MB
- SHA256 2f914530948bc8f2f3566f98e79620b4e358a81902fd9f9d19f69f6c74c3d706
- MD5 d87afcb8811f86e245983158ccc070f2
- SHA1 b55167f07b23a7e80722445112a8ab484e6ef697
- SHA512 66c47d97e56f79e08b086be701aaca705f303b2527779ce0ccfbc5b459b4c4853b5bbf05b71e19a87efd524c5c3387b8615e549306270c3217dea9e05a7d2c2a
- SSDEEP 98304:zvDTpSuRGCemJrj4IqHd7rlfgpkQnUc7wW1RBkLfrZUDUnM:7DTpS4ZJIIK7rlrQUC1RinM
- TLSH T14F260286F32DA03FD5B781378AB6037266960C0940A6EB231659B31C6EF7E405F59FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Acquires the wake lock
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
Queries information about active data network
Queries the mobile country code (MCC)
Reads information about phone network operator.
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Subvert Trust Controls
1Code Signing Policy Modification
1Virtualization/Sandbox Evasion
1System Checks
1