General
- Target Downloader.apk
- Size 40.8MB
- Sample260703-x1bmcsbw2j
- SHA256 24069b32944c11c7c4f2f20d7beb93e758ee6096abc873c04f7f6655f5f8ca23
- MD5 60b93aa7d3cf09afde40802d227dcd06
- SHA1 4600e2b37f1b2e48773d214a664fc4d8c5bbe73e
- SHA512 6e3c2dd4f3e8fa7e35a1cc6a3fb700b7722b5899ebfd31dcfb69da149166bf756571bc71e36e8b97c7aaf2aba09058a1e6910ed2e4eb969bbb387c06884c1f3a
- SSDEEP 786432:ViIYjRHAwS+xZyIiAIbTWJE53kb1DdZ6nt7sYm1pCjLT9me:mZyIiAIbYf387sYm1pCjLxt
- TLSH T14597DF13E7524D22C5AE433158FA47057B319E8AAB8397472014FA7CBDF32D0DADA6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Downloader.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Downloader.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Downloader.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Downloader.apk
- Size 40.8MB
- SHA256 24069b32944c11c7c4f2f20d7beb93e758ee6096abc873c04f7f6655f5f8ca23
- MD5 60b93aa7d3cf09afde40802d227dcd06
- SHA1 4600e2b37f1b2e48773d214a664fc4d8c5bbe73e
- SHA512 6e3c2dd4f3e8fa7e35a1cc6a3fb700b7722b5899ebfd31dcfb69da149166bf756571bc71e36e8b97c7aaf2aba09058a1e6910ed2e4eb969bbb387c06884c1f3a
- SSDEEP 786432:ViIYjRHAwS+xZyIiAIbTWJE53kb1DdZ6nt7sYm1pCjLT9me:mZyIiAIbYf387sYm1pCjLxt
- TLSH T14597DF13E7524D22C5AE433158FA47057B319E8AAB8397472014FA7CBDF32D0DADA6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
3System Checks
3