Resubmissions

31/07/2026, 14:23

260731-rp5heavbpb10

07/06/2026, 17:17

260607-vtnl8shv5q10

07/06/2026, 12:59

260607-p8a2ssfs5y10

General

  • Target
    c2c1d804aeed1913f858df48bf89a58b1f9819d7276a70b50785cf91c9d34083
  • Size 93KB
  • Sample260607-p8a2ssfs5y
  • SHA256 c2c1d804aeed1913f858df48bf89a58b1f9819d7276a70b50785cf91c9d34083
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      c2c1d804aeed1913f858df48bf89a58b1f9819d7276a70b50785cf91c9d34083
    • Size 93KB
    • SHA256 c2c1d804aeed1913f858df48bf89a58b1f9819d7276a70b50785cf91c9d34083
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • APT42 Android payload

    • Family: APT42

      An Android spyware used by APT42 group first seen in 2021.

    • Removes its main activity from the application launcher

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Queries information about active data network

MITRE ATT&CK Mobile v16

Tasks