General
- Target ibis Paint X Premium v14.0.4 - androforever.com.apk
- Size 51.1MB
- Sample260704-cptzcaat7x
- SHA256 ce6b2e574346ab937370fd47e5c22fe245d2cc679750f16027848ddba7c75990
- MD5 47e3c202b2a88b6da4740571d4b1f49d
- SHA1 46313bbcade001b3b9045aa37b408af911026f4c
- SHA512 744d2267079d662eda514d0739f9dc8da4bda38a04be9b53180f4b5bd9082a5903b58bb05225eb35f99a1487e37519d3d4ba5af6e2bbe325eb9a527a4c901475
- SSDEEP 1572864:2luAffB6zQZfm2wyY5OIC659G6mOw1xUNOCvIumBgMERRk:2lnffMwZY5Y6DG6mOwzGO+plRG
- TLSH T1E7C73389F388FE1EC87B81364A3E563651560C458E83C65BB659734C68B3EE80F16FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ibis Paint X Premium v14.0.4 - androforever.com.apk
Resource
android-35-x64-arm64-20260325-es
5 signatures
150 seconds
Malware Config
Targets
-
- Target ibis Paint X Premium v14.0.4 - androforever.com.apk
- Size 51.1MB
- SHA256 ce6b2e574346ab937370fd47e5c22fe245d2cc679750f16027848ddba7c75990
- MD5 47e3c202b2a88b6da4740571d4b1f49d
- SHA1 46313bbcade001b3b9045aa37b408af911026f4c
- SHA512 744d2267079d662eda514d0739f9dc8da4bda38a04be9b53180f4b5bd9082a5903b58bb05225eb35f99a1487e37519d3d4ba5af6e2bbe325eb9a527a4c901475
- SSDEEP 1572864:2luAffB6zQZfm2wyY5OIC659G6mOw1xUNOCvIumBgMERRk:2lnffMwZY5Y6DG6mOwzGO+plRG
- TLSH T1E7C73389F388FE1EC87B81364A3E563651560C458E83C65BB659734C68B3EE80F16FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks the presence of a debugger