General
- Target Setup.apk
- Size 41.3MB
- Sample260703-j2e5aaaw4r
- SHA256 1a13a816dd3d5a0055abc5c30f11d939bdcb78ee7c9ac02a73651561474f477b
- MD5 863d9bc066ad454ae174e52503c38866
- SHA1 5e37de5b936b27a256a205302314b88d2badc5a9
- SHA512 d8f8e3ec02bd26074cc6acc0d4cab7033094b1ddabf7a6620672fd18fdbe75a0a1400b8fc0cf612e43239c84a70b6e7aa002ebc11f483b084ac0c1eb32d5cdc4
- SSDEEP 786432:JZ9eojFZyIiAIbbiLqD9UX+TR5RoplFNLGF70XBL07wq:JbeohZyIiAIbbuQk+85L1Rgkq
- TLSH T10197E043EB6A4D32C5BE873548FA47047B325E4A9B47A7471105F6B8FCB32C09E996C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Setup.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.apk
- Size 41.3MB
- SHA256 1a13a816dd3d5a0055abc5c30f11d939bdcb78ee7c9ac02a73651561474f477b
- MD5 863d9bc066ad454ae174e52503c38866
- SHA1 5e37de5b936b27a256a205302314b88d2badc5a9
- SHA512 d8f8e3ec02bd26074cc6acc0d4cab7033094b1ddabf7a6620672fd18fdbe75a0a1400b8fc0cf612e43239c84a70b6e7aa002ebc11f483b084ac0c1eb32d5cdc4
- SSDEEP 786432:JZ9eojFZyIiAIbbiLqD9UX+TR5RoplFNLGF70XBL07wq:JbeohZyIiAIbbuQk+85L1Rgkq
- TLSH T10197E043EB6A4D32C5BE873548FA47047B325E4A9B47A7471105F6B8FCB32C09E996C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
3System Checks
3