General
- Target MyTalkingThomas.apk
- Size 3.2MB
- Sample260702-tqhfdaew2r
- SHA256 fabf1319c8eec02aa8985952b1c6f96078af87005d6cd11036f4571a50ee6fd5
- MD5 4701b8ae582b1d1b462c3f6adaa327e8
- SHA1 6fc4c5b2d9aaeef69d7f0f50668bf81234a0bfa2
- SHA512 1f0c7b0402a216983ca0f549a2380826a7f9e3459d3d083543c1ff2fc0da1bc5b3b3d522bcc2f9043f61cff76004e230fe2d633f6475ca5c0c37e399f844b471
- SSDEEP 98304:NpQIBuPMina2tyTiClnH191/RldyIYjbwJD:zzBuMwQiCZHp/RuPE
- TLSH T1B0E51242F3E8AD2FCD7740331BA6063A45865D52CA53D3538968B26C6DBBAC08F56FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
MyTalkingThomas.apk
Resource
android-33-x64-arm64-20260325-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target MyTalkingThomas.apk
- Size 3.2MB
- SHA256 fabf1319c8eec02aa8985952b1c6f96078af87005d6cd11036f4571a50ee6fd5
- MD5 4701b8ae582b1d1b462c3f6adaa327e8
- SHA1 6fc4c5b2d9aaeef69d7f0f50668bf81234a0bfa2
- SHA512 1f0c7b0402a216983ca0f549a2380826a7f9e3459d3d083543c1ff2fc0da1bc5b3b3d522bcc2f9043f61cff76004e230fe2d633f6475ca5c0c37e399f844b471
- SSDEEP 98304:NpQIBuPMina2tyTiClnH191/RldyIYjbwJD:zzBuMwQiCZHp/RuPE
- TLSH T1B0E51242F3E8AD2FCD7740331BA6063A45865D52CA53D3538968B26C6DBBAC08F56FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Changes the wallpaper (common with ransomware activity)