General
- Target xm1shop.apk
- Size 10.0MB
- Sample260620-gzd34adw2q
- SHA256 b7fe10737fffbbe9c582429ac26afd114760f923d5b2018050da6482f8a9a9c6
- MD5 5367e3ea6b6bd7d7cb73e5a889c23654
- SHA1 636a9bda5120b4f2c7dfc2e7d7e023974707ccfb
- SHA512 b0ccbb3ad295f08a8f759309b4338e56172cc8366766c81c293e355baa48d653a4b33c326ee31cb960e6c57f2e707d8b10717a27189af1cf5d95021c6e380655
- SSDEEP 196608:1sfL/fLbfLafLyfLoHR58r/L97mL4a0/rjjBqxypUH+Qz:grnIgoxuX97m8aGjNmVz
- TLSH T1AFB6128EFB98DA2FC473503305561236555F8D0A9B83974B65983B4C78B76E80F8ABCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
xm1shop.apk
Resource
android-x86-arm-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
xm1shop.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
xm1shop.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target xm1shop.apk
- Size 10.0MB
- SHA256 b7fe10737fffbbe9c582429ac26afd114760f923d5b2018050da6482f8a9a9c6
- MD5 5367e3ea6b6bd7d7cb73e5a889c23654
- SHA1 636a9bda5120b4f2c7dfc2e7d7e023974707ccfb
- SHA512 b0ccbb3ad295f08a8f759309b4338e56172cc8366766c81c293e355baa48d653a4b33c326ee31cb960e6c57f2e707d8b10717a27189af1cf5d95021c6e380655
- SSDEEP 196608:1sfL/fLbfLafLyfLoHR58r/L97mL4a0/rjjBqxypUH+Qz:grnIgoxuX97m8aGjNmVz
- TLSH T1AFB6128EFB98DA2FC473503305561236555F8D0A9B83974B65983B4C78B76E80F8ABCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Reads the content of SMS inbox messages.
Reads the content of outgoing SMS messages.
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries information about active data network
Queries the mobile country code (MCC)
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2