General
- Target p_1773322694470.apk
- Size 6.8MB
- Sample260703-vtzphac14v
- SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
- MD5 db0c26646324a6ea8fab16883a8c8cd5
- SHA1 ca2477fe4e2b80df9c3d61ea706261ac90aff39c
- SHA512 49e9297ebde7d0ae18784d3bb2ba5fcc1dea4dfd88415cb2eac8294f29eacf9fdca6372ae318114e80b6d75daa5185d8269d106bcfa7c130e714a5cd2b9d6cc0
- SSDEEP 98304:uphub+/zsIsiiatsbbAcRD2wBo+O+n0Esr418RWWteJYBDE2kqsJfI2vNGITEi:ZxyBcRD2WPVNeROYBQ2kqsJfJv4zi
- TLSH T11966F141F7D8996AC4BFC1365366033523874D168A82EAD39D0DFB6C3CFB4911E8A6E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
p_1773322694470.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target p_1773322694470.apk
- Size 6.8MB
- SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
- MD5 db0c26646324a6ea8fab16883a8c8cd5
- SHA1 ca2477fe4e2b80df9c3d61ea706261ac90aff39c
- SHA512 49e9297ebde7d0ae18784d3bb2ba5fcc1dea4dfd88415cb2eac8294f29eacf9fdca6372ae318114e80b6d75daa5185d8269d106bcfa7c130e714a5cd2b9d6cc0
- SSDEEP 98304:uphub+/zsIsiiatsbbAcRD2wBo+O+n0Esr418RWWteJYBDE2kqsJfI2vNGITEi:ZxyBcRD2WPVNeROYBQ2kqsJfJv4zi
- TLSH T11966F141F7D8996AC4BFC1365366033523874D168A82EAD39D0DFB6C3CFB4911E8A6E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the SMS messages.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).