General
- Target android-backdoor-v2.apk
- Size 6.1MB
- Sample260705-vwkncsev2w
- SHA256 19f745318e134ef91ceac71ab347f5a8343c22a726c25bc08081be902427ade4
- MD5 34d8d58fbdaec2390de06f6fa81cdae0
- SHA1 c3b2ea128e563ed4b58345e2c8b0cbe1505ae695
- SHA512 bfb6d6c17097180e1b5639535a333cd56e6f62d5c4ca14394ca4cda2b969d869f2a1922fb8f5124165fe912c750670ee776e510eb807a50f60d09a4662885d0f
- SSDEEP 98304:sVmsO8ftRrdSfEW2g7U8Avke75EEppppTuE3iO6eHvjJCpXujHaFZyOT2UyJLt9O:sVmVfEF8AsytupmvjJCpXmaFZTOe7
- TLSH T104560185BB48E82BC47B743245BA5722518B8D068E83D753A9453E0C6DBBAC41F5EFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
android-backdoor-v2.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
android-backdoor-v2.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
android-backdoor-v2.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
android-backdoor-v2.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
android-backdoor-v2.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
android-backdoor-v2.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target android-backdoor-v2.apk
- Size 6.1MB
- SHA256 19f745318e134ef91ceac71ab347f5a8343c22a726c25bc08081be902427ade4
- MD5 34d8d58fbdaec2390de06f6fa81cdae0
- SHA1 c3b2ea128e563ed4b58345e2c8b0cbe1505ae695
- SHA512 bfb6d6c17097180e1b5639535a333cd56e6f62d5c4ca14394ca4cda2b969d869f2a1922fb8f5124165fe912c750670ee776e510eb807a50f60d09a4662885d0f
- SSDEEP 98304:sVmsO8ftRrdSfEW2g7U8Avke75EEppppTuE3iO6eHvjJCpXujHaFZyOT2UyJLt9O:sVmVfEF8AsytupmvjJCpXmaFZTOe7
- TLSH T104560185BB48E82BC47B743245BA5722518B8D068E83D753A9453E0C6DBBAC41F5EFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests modifying system settings.