General
- Target sms-spy-v3.apk
- Size 6.1MB
- Sample260705-ay45kabt6n
- SHA256 d938763d935cc9b880575ee1fa2fc61022e091ea0d2d2caa94942569d4306854
- MD5 8875ef6959151deefbf7f9b2ecb4ee0d
- SHA1 76350ba606f387ce52fd31b9f5270a8bb9359f71
- SHA512 019d7c7b3b27f774daecac6a89d2b4f8986a63569d23bace660c46359314c287e655fe2163ef8e9fddc43b9256b4065e57a202ed0a6b020d31f91c60ffb5f49b
- SSDEEP 98304:9RCO8ftRrdZEDPRbW2g7U8Avke75EEppppTuE3iO6eHvjJCpXujHaFZyOT2UyJLZ:9RwEDPRbF8AsytupmvjJCpXmaFZTOtMk
- TLSH T16A560185FB48D92BC477743245BA5722518B8D068E83D753A9483E0C6DBBAD41F8EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sms-spy-v3.apk
Resource
android-33-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
sms-spy-v3.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
sms-spy-v3.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
sms-spy-v3.apk
Resource
android-34-x64-arm64-20260325.1-en
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
sms-spy-v3.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
sms-spy-v3.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target sms-spy-v3.apk
- Size 6.1MB
- SHA256 d938763d935cc9b880575ee1fa2fc61022e091ea0d2d2caa94942569d4306854
- MD5 8875ef6959151deefbf7f9b2ecb4ee0d
- SHA1 76350ba606f387ce52fd31b9f5270a8bb9359f71
- SHA512 019d7c7b3b27f774daecac6a89d2b4f8986a63569d23bace660c46359314c287e655fe2163ef8e9fddc43b9256b4065e57a202ed0a6b020d31f91c60ffb5f49b
- SSDEEP 98304:9RCO8ftRrdZEDPRbW2g7U8Avke75EEppppTuE3iO6eHvjJCpXujHaFZyOT2UyJLZ:9RwEDPRbF8AsytupmvjJCpXmaFZTOtMk
- TLSH T16A560185FB48D92BC477743245BA5722518B8D068E83D753A9483E0C6DBBAD41F8EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Reads the contacts stored on the device.
-
Reads the content of SMS inbox messages.
-
Reads the content of the call log.
-
Queries the mobile country code (MCC)
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
Requests changing the default SMS application.
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Tasks
static1
ratarsink
Score
10/10
behavioral1
Score
1/10
behavioral2
collectioncredential_accessdiscoveryimpactpersistence
Score
7/10
behavioral3
collectioncredential_accessimpact
Score
7/10
behavioral4
collectioncredential_accessdefense_evasionimpact
Score
7/10
behavioral5
Score
1/10
behavioral6
collectioncredential_accessdiscoveryimpactpersistence
Score
7/10