General
- Target p_1773322694470.apk
- Size 6.8MB
- Sample260703-w7m4ases8y
- SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
- MD5 db0c26646324a6ea8fab16883a8c8cd5
- SHA1 ca2477fe4e2b80df9c3d61ea706261ac90aff39c
- SHA512 49e9297ebde7d0ae18784d3bb2ba5fcc1dea4dfd88415cb2eac8294f29eacf9fdca6372ae318114e80b6d75daa5185d8269d106bcfa7c130e714a5cd2b9d6cc0
- SSDEEP 98304:uphub+/zsIsiiatsbbAcRD2wBo+O+n0Esr418RWWteJYBDE2kqsJfI2vNGITEi:ZxyBcRD2WPVNeROYBQ2kqsJfJv4zi
- TLSH T11966F141F7D8996AC4BFC1365366033523874D168A82EAD39D0DFB6C3CFB4911E8A6E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
p_1773322694470.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target p_1773322694470.apk
- Size 6.8MB
- SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
- MD5 db0c26646324a6ea8fab16883a8c8cd5
- SHA1 ca2477fe4e2b80df9c3d61ea706261ac90aff39c
- SHA512 49e9297ebde7d0ae18784d3bb2ba5fcc1dea4dfd88415cb2eac8294f29eacf9fdca6372ae318114e80b6d75daa5185d8269d106bcfa7c130e714a5cd2b9d6cc0
- SSDEEP 98304:uphub+/zsIsiiatsbbAcRD2wBo+O+n0Esr418RWWteJYBDE2kqsJfI2vNGITEi:ZxyBcRD2WPVNeROYBQ2kqsJfJv4zi
- TLSH T11966F141F7D8996AC4BFC1365366033523874D168A82EAD39D0DFB6C3CFB4911E8A6E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Queries the phone number (MSISDN for GSM devices)
Reads the content of the SMS messages.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Requests disabling of battery optimizations (often used to enable hiding in the background).