General
- Target 5_6330097756337609513.apk
- Size 5.2MB
- Sample260615-k9flfsh16v
- SHA256 0337bfff5bd8a5f613776769af30e9090c0c2fa72129d3f561adc5548193b901
Score
10/10
Malware Config
Targets
-
- Target 5_6330097756337609513.apk
- Size 5.2MB
- SHA256 0337bfff5bd8a5f613776769af30e9090c0c2fa72129d3f561adc5548193b901
Score8/10-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the SMS messages.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).