General
- Target 260623-atb8zshv14_pw_infected.zip
- Size 7.7MB
- Sample260624-bp7prshx4k
- SHA256 011747e761a849c18e4547bdc3b8c50c70a3bab59af1ad6dc9169da7bc035acf
- MD5 bcf82c373c0cdb7f2abcae76f1ce2c25
- SHA1 ccc07fd6e690033d89d5185bc7fcb34bfcaa4ec0
- SHA512 8ae8d8d5fa3928a2dde34aa6af9188a2f4ea1024421fda6ed87536d5ccb286deb0db3877d04307ea0cc522f7dd88700a25e638411ef375b4ef4351b7836cf339
- SSDEEP 196608:mryP1+NVSAuEstDrUGL5JuWIDjiHTdqxh42GplPlF3:WqkZuDECLufcTwo/TPlp
- TLSH T17E86337D6FEFFECABF203E098552621F75A845243E89ECA873B7C48510369055F4AB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
4e2cbefc6bdbfdb6e885057ce47d460e3d3355a5e97db51b22e9c5a14e14302b.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 4e2cbefc6bdbfdb6e885057ce47d460e3d3355a5e97db51b22e9c5a14e14302b
- Size 11.0MB
- SHA256 4e2cbefc6bdbfdb6e885057ce47d460e3d3355a5e97db51b22e9c5a14e14302b
- MD5 6386b68eabc6360276f6fc88aade79e7
- SHA1 7b088a7f9b99895b23c0bd243c84558f55e27a98
- SHA512 9c255bec90c0b841a69b8307c387b7ba19dfe1dee15c239d8a906d71e1cc27ea348bd3eb2e574be6f43f51691b23332da381854bb0bf3e6f6e884e1c9ea637f4
- SSDEEP 98304:XuwABFfiK4O/7tNdSCkiSKbzwDznxiZllk3+MWT+ZQ/vo3SGy4nyn8XE0S9d8kBX:eVDfiWJSRiSRnx5RmHGmClWUSIJW
- TLSH T182C6CF33F701AC2EC47A923345A55FA22662BD459743CB471419B62E78B34FC0BDA68F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries information about active data network
Requests disabling of battery optimizations (often used to enable hiding in the background).