General
- Target anger-of-stick-5-mod-1.1.94-an1.com.apk
- Size 49.6MB
- Sample260703-krfthaaz3n
- SHA256 2f6a151df2bcf86d914e8df2b94bf3e933a34462f247a4a6b7c5187b897ad873
- MD5 80ac16356204ef708a1eb3118af78645
- SHA1 818b755434bae080ee5dd8f3dd1b5f16cd96a885
- SHA512 120de05be76ae0ae60206ec84d72a915f517a2eab11948bc6fcd80392e743d82fc16e74123e2538f6f2fbc0eccfcfbd10cd4f3b2db08334ddc1f3208dce94e72
- SSDEEP 1572864:VzNRz55TjwPSF0bjLDJU7bfGjs6GBqpXX:VzNRjXsSFEPDJyzX6xpXX
- TLSH T10FB7BD99A8909845D81CB978E0FC9541CBF32EE14D30010E6FEABDA55F72DCC8EE159B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
anger-of-stick-5-mod-1.1.94-an1.com.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target anger-of-stick-5-mod-1.1.94-an1.com.apk
- Size 49.6MB
- SHA256 2f6a151df2bcf86d914e8df2b94bf3e933a34462f247a4a6b7c5187b897ad873
- MD5 80ac16356204ef708a1eb3118af78645
- SHA1 818b755434bae080ee5dd8f3dd1b5f16cd96a885
- SHA512 120de05be76ae0ae60206ec84d72a915f517a2eab11948bc6fcd80392e743d82fc16e74123e2538f6f2fbc0eccfcfbd10cd4f3b2db08334ddc1f3208dce94e72
- SSDEEP 1572864:VzNRz55TjwPSF0bjLDJU7bfGjs6GBqpXX:VzNRjXsSFEPDJyzX6xpXX
- TLSH T10FB7BD99A8909845D81CB978E0FC9541CBF32EE14D30010E6FEABDA55F72DCC8EE159B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3