General
- Target telelatino.apk
- Size 12.4MB
- Sample260701-yr75msdz5j
- SHA256 4ac2613d62f364f77f36cb6ea45e460e4c2bb767ad7bcddbeffa612dd007e1f8
- MD5 5e400411d18d28a6587a1bd618b879db
- SHA1 85f948c7567dfc79de4870a4482c2033870eef9f
- SHA512 dedd0923d17873fd6e3be73ef65a144a97b643ba9b7b4e462270aad868814adb788b8409c7550acb4ec27c592f8ab333b7e34e200ccc5c74bc65abbcb48f9cf2
- SSDEEP 196608:fwoDzYIKaRoutwvwwEYyjTv206EDWRHldxrR0+EkGAYH8VQ3kHr:fwOiwwYwEpjTvB6EDWhN2+sBHq+Q
- TLSH T166D6018FF3685A2EC87740B20D59523126674D22FA4397776938376D38776E80F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
telelatino.apk
Resource
android-x64-arm64-20260325-es
12 signatures
150 seconds
Malware Config
Targets
-
- Target telelatino.apk
- Size 12.4MB
- SHA256 4ac2613d62f364f77f36cb6ea45e460e4c2bb767ad7bcddbeffa612dd007e1f8
- MD5 5e400411d18d28a6587a1bd618b879db
- SHA1 85f948c7567dfc79de4870a4482c2033870eef9f
- SHA512 dedd0923d17873fd6e3be73ef65a144a97b643ba9b7b4e462270aad868814adb788b8409c7550acb4ec27c592f8ab333b7e34e200ccc5c74bc65abbcb48f9cf2
- SSDEEP 196608:fwoDzYIKaRoutwvwwEYyjTv206EDWRHldxrR0+EkGAYH8VQ3kHr:fwOiwwYwEpjTvB6EDWhN2+sBHq+Q
- TLSH T166D6018FF3685A2EC87740B20D59523126674D22FA4397776938376D38776E80F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger