General
- Target kavachupdate.apk
- Size 1.2MB
- Sample260703-jdfqxads2t
- SHA256 c8f21960488c72afd8d0b82631bff37b8fb6eff9c44cd5a1c257c27b73912b16
- MD5 e86300e677742f5b1b565432e3ff2f2a
- SHA1 f475260ab4476db3fb4660a1cc9c2d87cebc4175
- SHA512 0bbf1d7bca7325a8fa29aa81495ee7fa1c31cf02a44358ca5fe135bef594b2c082a41fd64498691063f8f3bb30663ebbdc802133551ddc8439232338ddb0939c
- SSDEEP 24576:+XBnXnertAib71tduklbxsgQPAKdS1RWAO0rmHT3SFuibGNox/G:sXnertrb7zdus2gQPhdS1luTCFusDx+
- TLSH T11C55121EBECD9B1BDB6D073E85DC9563A53DAF564882417F13C2F29A997E0C00F94848
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
kavachupdate.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target kavachupdate.apk
- Size 1.2MB
- SHA256 c8f21960488c72afd8d0b82631bff37b8fb6eff9c44cd5a1c257c27b73912b16
- MD5 e86300e677742f5b1b565432e3ff2f2a
- SHA1 f475260ab4476db3fb4660a1cc9c2d87cebc4175
- SHA512 0bbf1d7bca7325a8fa29aa81495ee7fa1c31cf02a44358ca5fe135bef594b2c082a41fd64498691063f8f3bb30663ebbdc802133551ddc8439232338ddb0939c
- SSDEEP 24576:+XBnXnertAib71tduklbxsgQPAKdS1RWAO0rmHT3SFuibGNox/G:sXnertrb7zdus2gQPhdS1luTCFusDx+
- TLSH T11C55121EBECD9B1BDB6D073E85DC9563A53DAF564882417F13C2F29A997E0C00F94848
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
MITRE ATT&CK Mobile v16
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1