General
- Target rorx24.apk
- Size 9.8MB
- Sample260701-w15d1act3j
- SHA256 b2c385e93e37f2368475f07f5892789feceae997d0df6e6fe043561ee53cabc9
- MD5 108d444dafaf24bb1def7c6ccf79759c
- SHA1 0a9e1a41e12f03f5d863e7511d1750ced3333c15
- SHA512 c5a479b79b3e05329b2963d319d4a6a56fb59acc944982fc3b7233989603f2ec5e0ffd5364dab8919a62ab0aa81e02285d657ba2cbf2b28769c9b999b199a508
- SSDEEP 196608:ddIZIaSYqC2olvXuu4muMjeP9GL9oMazJxzBC5iG0OeXt5no:reNSYqrMj471A0OOno
- TLSH T10CA60246FB54A95AC4F7833311F65636504B4C268B43D6876A09F27C28BB9F00F9AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
rorx24.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
rorx24.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
rorx24.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target rorx24.apk
- Size 9.8MB
- SHA256 b2c385e93e37f2368475f07f5892789feceae997d0df6e6fe043561ee53cabc9
- MD5 108d444dafaf24bb1def7c6ccf79759c
- SHA1 0a9e1a41e12f03f5d863e7511d1750ced3333c15
- SHA512 c5a479b79b3e05329b2963d319d4a6a56fb59acc944982fc3b7233989603f2ec5e0ffd5364dab8919a62ab0aa81e02285d657ba2cbf2b28769c9b999b199a508
- SSDEEP 196608:ddIZIaSYqC2olvXuu4muMjeP9GL9oMazJxzBC5iG0OeXt5no:reNSYqrMj471A0OOno
- TLSH T10CA60246FB54A95AC4F7833311F65636504B4C268B43D6876A09F27C28BB9F00F9AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.