General
- Target 1.0.1cni.apk
- Size 14.1MB
- Sample260623-msnxlsbz7q
- SHA256 e7ebdb568964cb3e223ec4a2feca299302ee8b3b2581664bf7d41f5160a1f84f
- MD5 51983f48ca91522c736e1740721d5ea2
- SHA1 2ad17ddc3abeca808e062be6bbfc5ab589c67900
- SHA512 70f65f495c6174ed56fdcb071d7885ee0a66b31287bec3f86feb0a06f8c6198913c341e176af97f15f49423a27155620fb54b78d2049f3a88ce2fd6aa98617f2
- SSDEEP 393216:zrEa2ljoX7QNtG5UlzmzvXxEriGggaeFuCMNyX:zYTyMG5UVEvBErlgvyUyX
- TLSH T154E622D7F7285D2ECCB345324D594231662A4ED5CE42A78B7658376C68B36E80F88BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
1.0.1cni.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1.0.1cni.apk
- Size 14.1MB
- SHA256 e7ebdb568964cb3e223ec4a2feca299302ee8b3b2581664bf7d41f5160a1f84f
- MD5 51983f48ca91522c736e1740721d5ea2
- SHA1 2ad17ddc3abeca808e062be6bbfc5ab589c67900
- SHA512 70f65f495c6174ed56fdcb071d7885ee0a66b31287bec3f86feb0a06f8c6198913c341e176af97f15f49423a27155620fb54b78d2049f3a88ce2fd6aa98617f2
- SSDEEP 393216:zrEa2ljoX7QNtG5UlzmzvXxEriGggaeFuCMNyX:zYTyMG5UVEvBErlgvyUyX
- TLSH T154E622D7F7285D2ECCB345324D594231662A4ED5CE42A78B7658376C68B36E80F88BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Queries information about active data network
Checks the presence of a debugger