General
- Target xapk-installer-apk-installer-1-0-9.apk
- Size 5.1MB
- Sample260625-2b9kbags2l
- SHA256 1a4954e8be65d3fd7e2307de0a923afae72bb8c2cac90b7bdf137185e1e41463
- MD5 337bbd2bfc7cafab550cf64cc69b9d9f
- SHA1 30c0a58a3537c2db91f7b53fb65e7e0eb0761bc3
- SHA512 ab4229e9bdc5ceb2dd5b522ae8ca71a0fdc26ca5aa4cfb830639229902d72f47c1f000a66aa2d663e3a3cd80d486363427c73087dc08efff4ae970e67083e67e
- SSDEEP 98304:3HzgzMYkZ3gS88xq6MwleWJG10b83hEO5OJmKgLCruJwL3:dQS82q61eWo1Rex81g
- TLSH T16936E1D6F7D8A92FC8775036C96A57B1114B0C128E83AF837918734D28B79D84F5ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
xapk-installer-apk-installer-1-0-9.apk
Resource
android-33-x64-arm64-20260325-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target xapk-installer-apk-installer-1-0-9.apk
- Size 5.1MB
- SHA256 1a4954e8be65d3fd7e2307de0a923afae72bb8c2cac90b7bdf137185e1e41463
- MD5 337bbd2bfc7cafab550cf64cc69b9d9f
- SHA1 30c0a58a3537c2db91f7b53fb65e7e0eb0761bc3
- SHA512 ab4229e9bdc5ceb2dd5b522ae8ca71a0fdc26ca5aa4cfb830639229902d72f47c1f000a66aa2d663e3a3cd80d486363427c73087dc08efff4ae970e67083e67e
- SSDEEP 98304:3HzgzMYkZ3gS88xq6MwleWJG10b83hEO5OJmKgLCruJwL3:dQS82q61eWo1Rex81g
- TLSH T16936E1D6F7D8A92FC8775036C96A57B1114B0C128E83AF837918734D28B79D84F5ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Subvert Trust Controls
1Code Signing Policy Modification
1Virtualization/Sandbox Evasion
2System Checks
2