General
- Target kavachupdate.apk
- Size 1.2MB
- Sample260702-2w4jsscz2j
- SHA256 c8f21960488c72afd8d0b82631bff37b8fb6eff9c44cd5a1c257c27b73912b16
- MD5 e86300e677742f5b1b565432e3ff2f2a
- SHA1 f475260ab4476db3fb4660a1cc9c2d87cebc4175
- SHA512 0bbf1d7bca7325a8fa29aa81495ee7fa1c31cf02a44358ca5fe135bef594b2c082a41fd64498691063f8f3bb30663ebbdc802133551ddc8439232338ddb0939c
- SSDEEP 24576:+XBnXnertAib71tduklbxsgQPAKdS1RWAO0rmHT3SFuibGNox/G:sXnertrb7zdus2gQPhdS1luTCFusDx+
- TLSH T11C55121EBECD9B1BDB6D073E85DC9563A53DAF564882417F13C2F29A997E0C00F94848
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kavachupdate.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
kavachupdate.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
kavachupdate.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
kavachupdate.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
kavachupdate.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
kavachupdate.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target kavachupdate.apk
- Size 1.2MB
- SHA256 c8f21960488c72afd8d0b82631bff37b8fb6eff9c44cd5a1c257c27b73912b16
- MD5 e86300e677742f5b1b565432e3ff2f2a
- SHA1 f475260ab4476db3fb4660a1cc9c2d87cebc4175
- SHA512 0bbf1d7bca7325a8fa29aa81495ee7fa1c31cf02a44358ca5fe135bef594b2c082a41fd64498691063f8f3bb30663ebbdc802133551ddc8439232338ddb0939c
- SSDEEP 24576:+XBnXnertAib71tduklbxsgQPAKdS1RWAO0rmHT3SFuibGNox/G:sXnertrb7zdus2gQPhdS1luTCFusDx+
- TLSH T11C55121EBECD9B1BDB6D073E85DC9563A53DAF564882417F13C2F29A997E0C00F94848
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1