a5a4794ade8b50a1d7c67867312c23c3654f70162036cc2ed065a48ccfc9c484 | Triage™

Login
Reports

Overview

overview

8

Static

static

6

com.fctv77...20.apk

android-15-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
com.fctv77.app-release-320-v3.0.320.apk
Size 12.5MB
Sample260704-2vxpvsaw9k
SHA256 a5a4794ade8b50a1d7c67867312c23c3654f70162036cc2ed065a48ccfc9c484
MD5 a315789331550780a21434a95dccc8dd
SHA1 90b795339f605e5b10f19a2c5c9a56d7c6f1b03c
SHA512 12ac5ff21069f624851343752990a313eabfa1c4b43b2874236c70f0f353d2ea5ba8ec71ced541a2bce3a6879dcc87d67f0cf528aa9ef7503eb5a518ab6ec080
SSDEEP 393216:MPoH/LJDLDZYJ6ppUA6rHs1XeuDykgCHA4hO/Lr481:MPW/dDLusnUA2Hsei1hOH481
TLSH
T116D612C2FB69DA2EC47770720C5A5331262A4D16CE829747B5583F6D78B36E80F49BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

android collection credential_access defense_evasion discovery execution impact persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

com.fctv77.app-release-320-v3.0.320.apk

Resource

android-35-x64-arm64-20260325-en

android-15-x64

9 signatures

150 seconds

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Targets

- Target
  com.fctv77.app-release-320-v3.0.320.apk
- Size 12.5MB
- SHA256 a5a4794ade8b50a1d7c67867312c23c3654f70162036cc2ed065a48ccfc9c484
- MD5 a315789331550780a21434a95dccc8dd
- SHA1 90b795339f605e5b10f19a2c5c9a56d7c6f1b03c
- SHA512 12ac5ff21069f624851343752990a313eabfa1c4b43b2874236c70f0f353d2ea5ba8ec71ced541a2bce3a6879dcc87d67f0cf528aa9ef7503eb5a518ab6ec080
- SSDEEP 393216:MPoH/LJDLDZYJ6ppUA6rHs1XeuDykgCHA4hO/Lr481:MPW/dDLusnUA2Hsei1hOH481
- TLSH
  T116D612C2FB69DA2EC47770720C5A5331262A4D16CE829747B5583F6D78B36E80F49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence

© 2018-2026

Terms | Privacy