General
- Target Cricfy_V6.8.apk
- Size 17.0MB
- Sample260630-s3f8eaay6j
- SHA256 831b86a33877700df845a493d97ec496ccc431f1d3e84298f15cfca10124652a
- MD5 79467088aca481f0424caaae9ad1a1f6
- SHA1 3351333a68ddc613a42185210d3f2bb9a2a0f293
- SHA512 1c79302027cbd58b872305983dc8cafc64324800a5c0d61ee09586bbfdedf65fa2e689662f3f9233a775cc7050d5820aff1650a0616e13f1c609f58188cd3988
- SSDEEP 393216:af2/Woa3shCI3fWyv6i3vIDwxdh95Wivr1qj/j308lK:Ta3sEI3fDzIDwxdh95M/jK
- TLSH T160071286F798E95BC4F3A33649765B62120B0C618B53D3972914B37C28F76E04E4EBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Cricfy_V6.8.apk
Resource
android-x64-arm64-20260325-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target Cricfy_V6.8.apk
- Size 17.0MB
- SHA256 831b86a33877700df845a493d97ec496ccc431f1d3e84298f15cfca10124652a
- MD5 79467088aca481f0424caaae9ad1a1f6
- SHA1 3351333a68ddc613a42185210d3f2bb9a2a0f293
- SHA512 1c79302027cbd58b872305983dc8cafc64324800a5c0d61ee09586bbfdedf65fa2e689662f3f9233a775cc7050d5820aff1650a0616e13f1c609f58188cd3988
- SSDEEP 393216:af2/Woa3shCI3fWyv6i3vIDwxdh95Wivr1qj/j308lK:Ta3sEI3fDzIDwxdh95M/jK
- TLSH T160071286F798E95BC4F3A33649765B62120B0C618B53D3972914B37C28F76E04E4EBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger