General
- Target 38b51da971fcdea464793f752f538cb958661eca6af7706abedbc939ba35daf8
- Size 753KB
- Sample260604-std2pahw6t
- SHA256 38b51da971fcdea464793f752f538cb958661eca6af7706abedbc939ba35daf8
- MD5 4f2b08f43b4e0ca4d5cbfbb36ba097d3
- SHA1 efeafa96c51351719dd9fb494e179128f82e8b15
- SHA512 7185a957d8bb2458731932a7280521ce39ce2b8133131d1f9c90561946d2357e559773be2d0cde43342e2e1d0cd533c9778eb4ef20fb28f1844a04171ce57676
- SSDEEP 12288:mowFWBSBR/S8/kIVaFQJK+Vw5XxMdogR8s8RmIBsFr/oCjzrZc/EVP2vbLA4jvc5:3wFWBSD/r4WK+VMOdogpOfer/5/Z9wb2
- TLSH T1EFF43377B469F5EE4F9E9EC144CAFDB5099C32EA5209887C1A1DE1D3F0A5BF2A052043
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
050cdaa79d05ba3be02652cfec893d3c4d8cc4af9f3808682e6371fc7f1cf128.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 050cdaa79d05ba3be02652cfec893d3c4d8cc4af9f3808682e6371fc7f1cf128
- Size 786KB
- SHA256 050cdaa79d05ba3be02652cfec893d3c4d8cc4af9f3808682e6371fc7f1cf128
- MD5 10bb956369d99e4cb2fc4c01b6ef847e
- SHA1 981f1f2df3854d2e3e708165a49157779cdac1d9
- SHA512 5d12fb139b794a8b40d89862f618a1b022b4ea9df93082ae636aa3a2042c48a0d542be2eb18b69c80d857c2904b06f5a6b2f39f8992e38c46481760d751de837
- SSDEEP 24576:fOSu4ppWNgGL0n2jxz0UqSjMsV33+tIAj:HTuL1N0Uqy5O
- TLSH T11E0523CBA335895BFC71A9304E5F233AA13539A14A01412336E53F4DE6F12985FAA7CC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Android BADBOX payload
-
Family: BADBOX
BADBOX is an Android botnet that targets Android TV devices.
-
Checks if the Android device is rooted.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)