Overview
overview
8Static
static
69ddf0d33-8...c0.apk
android-13-x64
152cjHXHsqakbB50t.apk
android-9-x86
652cjHXHsqakbB50t.apk
android-10-x64
652cjHXHsqakbB50t.apk
android-11-x64
6G9J0N60b1mZUY6Kv.apk
android-9-x86
1G9J0N60b1mZUY6Kv.apk
android-10-x64
1G9J0N60b1mZUY6Kv.apk
android-11-x64
1orig.apk
windows10-2004-x64
3orig.apk
windows11-ltsc_2024-x64
8General
- Target 9ddf0d33-88d0-40d2-a758-9e6c40cc77c0.apk
- Size 781.3MB
- Sample260626-cbdp7shs5m
- SHA256 2b33d52d7d8b246a56db82a7a7f68fa04bb949e3fc796c1526633a56a5807f45
- MD5 3afc5084e3a1f1fb4bdbe25fb64de8cf
- SHA1 bd22d2ecfa629592d6e7f7074db04d6e805f34fc
- SHA512 b46b9969acc00a69471264c5b51f86bc1994fa23f97921ce577b9dc336b4fff03cec7f67beae1e38904ba154b2a5e301df4390af0d4a0e2a96c86a4a0657947f
- SSDEEP 12582912:gjlQkMaku0qGV/+piDvYr1bo2qG8DcI52Bm3HlEeFsz7NBAISH18wqOSAyR:eQvak5VhvYOOzRBAIW8GS7
- TLSH T13C89BE0A7105DE5AC5549AF9C8030EF9F527DF80C638D3A326243E9E7EF6B940D582B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
9ddf0d33-88d0-40d2-a758-9e6c40cc77c0.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
52cjHXHsqakbB50t.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral3
Sample
52cjHXHsqakbB50t.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral4
Sample
52cjHXHsqakbB50t.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
G9J0N60b1mZUY6Kv.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral6
Sample
G9J0N60b1mZUY6Kv.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral7
Sample
G9J0N60b1mZUY6Kv.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral8
Sample
orig.apk
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
orig.apk
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target 9ddf0d33-88d0-40d2-a758-9e6c40cc77c0.apk
- Size 781.3MB
- SHA256 2b33d52d7d8b246a56db82a7a7f68fa04bb949e3fc796c1526633a56a5807f45
- MD5 3afc5084e3a1f1fb4bdbe25fb64de8cf
- SHA1 bd22d2ecfa629592d6e7f7074db04d6e805f34fc
- SHA512 b46b9969acc00a69471264c5b51f86bc1994fa23f97921ce577b9dc336b4fff03cec7f67beae1e38904ba154b2a5e301df4390af0d4a0e2a96c86a4a0657947f
- SSDEEP 12582912:gjlQkMaku0qGV/+piDvYr1bo2qG8DcI52Bm3HlEeFsz7NBAISH18wqOSAyR:eQvak5VhvYOOzRBAIW8GS7
- TLSH T13C89BE0A7105DE5AC5549AF9C8030EF9F527DF80C638D3A326243E9E7EF6B940D582B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 52cjHXHsqakbB50t
- Size 1.8MB
- SHA256 fe12031ed41466ad304b3d737418d26c34ddb3c0c9cfc24556a72b0229e50041
- MD5 0ba97ad6ca9d6858615c2f218382313a
- SHA1 3a38203da7c09c584c4b2253eac535d6be762179
- SHA512 81a3a34f05b9b14a1f4fcbd417063b3d91c50afeee4bbad557e02dc8a542b76260e373d55bafda9f2791ee56cfd1843b2e1a075d51f65b55eae0158b0f64d8d3
- SSDEEP 49152:tAW8ldiSDvbtGTIJdIW24LlmkVgx+87H2:yT37btGTIxFm+N
- TLSH T17E953392FB2691EBDB3E46353F4D103E3B3A71829E911709618443B936A2B5C3FD17A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Queries information about active data network
-
- Target G9J0N60b1mZUY6Kv
- Size 1.3MB
- SHA256 e1c7bee1092b0a246ac2702e1c98d8c870e8187d43509b7f51411d43ca98dc77
- MD5 b36b52a2797ff58e59ab8506b03239bf
- SHA1 6b6abaa0354d17bb4223e3bb60c59a657f53c6fe
- SHA512 54d17102cfc04dc1f6a2f45ff654d5a0a44fb6f96febc045226bb97d21f1191920f46e3e76159cdebf59426623dc89178f110fe14ee8ae3c3aa273a1a6340fda
- SSDEEP 24576:X1bIXggw5+nyBiapg+VdWKUx5ZjlKzbIR75oBTqw4M+YbTejn:lbIXggw59i4g+vdcZ5N5aBe5qejn
- TLSH T1EF55E083F729482FC9BB85364EAA573516658D1BC693A70B84983B38783B7D40F59FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target orig.apk
- Size 286.5MB
- SHA256 b185c4c6212a69fe76323534b205617243d79754d10b67013948ef49d14e81fe
- MD5 316bc8e794ce8dd7b220945d5de9ad68
- SHA1 2dbee821b8ebda55aeab438d060f7aa52ccce829
- SHA512 a3db08adf19bf2123af97a9e56b8d2982fcc78f11c10f0d73831cf76e7292d438d59d7e4a74f60a6cbf01bbefe442c522a9f208f67409efd188e55ace94b6766
- SSDEEP 3145728:h73XYBpwnNiLk/dh9NKLllNKdhjknTpkOwoc16odORqGG50tRAPUlG:hjcpIN6k1NCnNaknFg16DrG5GRAMlG
- TLSH T1D8E8D0472636DE67E68486BCED020DFEF6689C08C52462735B1A7C6D7FB5BE4009C3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.