General
- Target Multi_App.apk
- Size 18.4MB
- Sample260620-d2yzhaes81
- SHA256 691a337c8d0a019fb0337bb84532e2d4a33efd35aabdc08c8c126b39ca461317
- MD5 0074b347d5c3d90c85fb2c4124cafc4e
- SHA1 56263515a2a02f1d406b89d7bd94b71d3a4a2249
- SHA512 fb8cbec54437fe566f812ff55cce5ecb307e7f5f7c5c91a019be417158c435ca86e05eaff13ffa2189e73bd17960fb53e7ba90aab3d32ea0e72908833d2b9303
- SSDEEP 393216:DERn3dN3WAiJAno+2bvRthMwPeoUMUoheQmu9MYvfHgbWx:YRntN3zbo+aj+wPeoUPowWR
- TLSH T10D1733C6F74C902BC43BB6768EBB536343424C4A4993AB572A48724C29FB5845F5FF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Multi_App.apk
Resource
android-33-x64-arm64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ext.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ext.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ext.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Multi_App.apk
- Size 18.4MB
- SHA256 691a337c8d0a019fb0337bb84532e2d4a33efd35aabdc08c8c126b39ca461317
- MD5 0074b347d5c3d90c85fb2c4124cafc4e
- SHA1 56263515a2a02f1d406b89d7bd94b71d3a4a2249
- SHA512 fb8cbec54437fe566f812ff55cce5ecb307e7f5f7c5c91a019be417158c435ca86e05eaff13ffa2189e73bd17960fb53e7ba90aab3d32ea0e72908833d2b9303
- SSDEEP 393216:DERn3dN3WAiJAno+2bvRthMwPeoUMUoheQmu9MYvfHgbWx:YRntN3zbo+aj+wPeoUPowWR
- TLSH T10D1733C6F74C902BC43BB6768EBB536343424C4A4993AB572A48724C29FB5845F5FF88
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
- Target ext.jar
- Size 11KB
- SHA256 1f0d72279da5436e9ddac4ba21b361de5381a510ad59b604f91f357c37cb4d0b
- MD5 2079ccf9424b58d9e2ec6e41ef2fe306
- SHA1 b09b1aa588addb8f03fa4614ea1f1601b2020f17
- SHA512 1c8247e868c287fdde615b640ebb34554d7a0f6db055f604cee2de3988fb664c3e8bca40396eaa067d78e62a1e4a3f1d6cdc323a90a16e798d6626474dd3649a
- SSDEEP 192:pRKbw8mjiVvhTtP6PqHdXBnNjmwT+uHLuSCa2VY1FYBL:TN8melhTtP6Pq9XFhzT4xL
- TLSH T15132AEFAF75C405CF14A5230A4CD4953A836829EC0693F15B128FA9ABE375EC4F446E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10