Resubmissions

23/06/2026, 16:58

260623-vgzhzaew5t8

22/06/2026, 20:30

260622-zad1xags4m8

General

  • Target
    jbapk
  • Size 4.5MB
  • Sample260623-vgzhzaew5t
  • SHA256 fbd38ff21a766cbd10b5b2b88bc954fb001a0fcc991abe0fa58336f15ac75c4c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jbapk
    • Size 4.5MB
    • SHA256 fbd38ff21a766cbd10b5b2b88bc954fb001a0fcc991abe0fa58336f15ac75c4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests allowing to install additional applications from unknown sources.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v16

Tasks