Resubmissions

03/07/2026, 18:33

260703-w7m4ases8y10

03/07/2026, 17:17

260703-vtzphac14v10

General

  • Target
    p_1773322694470.apk
  • Size 6.8MB
  • Sample260703-vtzphac14v
  • SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      p_1773322694470.apk
    • Size 6.8MB
    • SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the content of the SMS messages.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v16

Tasks