General
- Target promatka.apk
- Size 8.2MB
- Sample260621-amvrraby41
- SHA256 dbd12160537b7b54ecf1a1f1b53baf70106f783c9e7ea4b422803a7fd1df00a7
- MD5 2fea0e8cc7d34452d859cbdf8c214305
- SHA1 f269c0826ca657d9fbd485c585a9071a1cbb84cf
- SHA512 ecbf982e559a22ff618fcbaa3b2fa540090fdbcf527033b6bfae30977d327eab9d2e6e2ac7b69c0d94cdf6ba8322d06f10da188acb0d7cbb884ffb0177a79430
- SSDEEP 196608:l54I7lrlqVJAm39RdY9zUHMesdv2X9IwWO1rEVc0o:l5nZm3G9jeX9Iw5rE+0o
- TLSH T1D9962299F7D9EC2FCD73C0324B640A6A52468C6AD282E7171914B61C5CBBED44F86FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
promatka.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
promatka.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
promatka.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target promatka.apk
- Size 8.2MB
- SHA256 dbd12160537b7b54ecf1a1f1b53baf70106f783c9e7ea4b422803a7fd1df00a7
- MD5 2fea0e8cc7d34452d859cbdf8c214305
- SHA1 f269c0826ca657d9fbd485c585a9071a1cbb84cf
- SHA512 ecbf982e559a22ff618fcbaa3b2fa540090fdbcf527033b6bfae30977d327eab9d2e6e2ac7b69c0d94cdf6ba8322d06f10da188acb0d7cbb884ffb0177a79430
- SSDEEP 196608:l54I7lrlqVJAm39RdY9zUHMesdv2X9IwWO1rEVc0o:l5nZm3G9jeX9Iw5rE+0o
- TLSH T1D9962299F7D9EC2FCD73C0324B640A6A52468C6AD282E7171914B61C5CBBED44F86FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.