General
- Target 07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead
- Size 11.8MB
- Sample260629-lyd4xsav2s
- SHA256 07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead
- MD5 842d96f208b567e58c5656017fb67df6
- SHA1 9d3a0c7c7859cb71902c61b7664a925781b08ebf
- SHA512 47d6b54218610af39a23fb12d63a597dcf0ce2b1bfd97bd747b103b774cd7255e2a4222aff91e56021207c0fbc441d05c228ad0b18ef72aa5209bb9b5a131753
- SSDEEP 98304:YKz6siuBNEPftv3wOFdezmMqFxUmf38j1Q5fztpdyE8bKYGdo/KrcZo:YKzwuEPVv7TF0o
- TLSH T103C6AE4BA7965C31D4BE6339A9FA53403B316F827B434B4B2448B4A87CB36D25F987C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead
- Size 11.8MB
- SHA256 07d9deaace25d90fc91b31849dfc12b2fc3ac5ca90e317cfa165fe1d3553eead
- MD5 842d96f208b567e58c5656017fb67df6
- SHA1 9d3a0c7c7859cb71902c61b7664a925781b08ebf
- SHA512 47d6b54218610af39a23fb12d63a597dcf0ce2b1bfd97bd747b103b774cd7255e2a4222aff91e56021207c0fbc441d05c228ad0b18ef72aa5209bb9b5a131753
- SSDEEP 98304:YKz6siuBNEPftv3wOFdezmMqFxUmf38j1Q5fztpdyE8bKYGdo/KrcZo:YKzwuEPVv7TF0o
- TLSH T103C6AE4BA7965C31D4BE6339A9FA53403B316F827B434B4B2448B4A87CB36D25F987C4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Reads the contacts stored on the device.
-
Reads the content of photos stored on the user's device.
-
Reads the content of the call log.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.