General
- Target inat-box-v16_inatbox2comtr.apk
- Size 18.2MB
- Sample260623-xacfzafv8s
- SHA256 90a6132ec2abb641335b8f583f0fd21972a9f26a7e3677d62d7980dfb4a9bf18
- MD5 fb6f93e6e52bd30274e47db9fa8efbeb
- SHA1 cf810d4aad4af601f505db8554dc7c8d6acb41d7
- SHA512 21eee6c6ba90d6ba02a37bd7ad75d2f3f1f102d6f8dbcf4f7d71b620d5d3552de191c416772b5a45b5819043e8efa0b24a86c0f1d254496f6a653392e51429ce
- SSDEEP 196608:jaXr1xc4jT6ER219phxcnLeGO7bp5VdF+wIW9eETfDmJ/8j/LQf1m6fWD/HBVYQ9:j+7R6ER2rphxiz0VH+EeBWPDJVpn9
- TLSH T12817D043F149483EEDBAA434565F8332E9257C49831686EB6608F6343DB3AE44F2D7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
inat-box-v16_inatbox2comtr.apk
Resource
android-x64-arm64-20260325-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target inat-box-v16_inatbox2comtr.apk
- Size 18.2MB
- SHA256 90a6132ec2abb641335b8f583f0fd21972a9f26a7e3677d62d7980dfb4a9bf18
- MD5 fb6f93e6e52bd30274e47db9fa8efbeb
- SHA1 cf810d4aad4af601f505db8554dc7c8d6acb41d7
- SHA512 21eee6c6ba90d6ba02a37bd7ad75d2f3f1f102d6f8dbcf4f7d71b620d5d3552de191c416772b5a45b5819043e8efa0b24a86c0f1d254496f6a653392e51429ce
- SSDEEP 196608:jaXr1xc4jT6ER219phxcnLeGO7bp5VdF+wIW9eETfDmJ/8j/LQf1m6fWD/HBVYQ9:j+7R6ER2rphxiz0VH+EeBWPDJVpn9
- TLSH T12817D043F149483EEDBAA434565F8332E9257C49831686EB6608F6343DB3AE44F2D7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
3System Checks
3