General
- Target amerludo.apk
- Size 5.3MB
- Sample260706-ajk35sct8m
- SHA256 234a6256cb44d57ab1d52489cb6f817a99d7a8d06351c613be0bff40f6cfc4e0
- MD5 004058f76bdd36c39d93d9d77db21131
- SHA1 aa9405910785cb7ba46841f9350bacfc1df47945
- SHA512 027b0d71bb82bb07d8e5a0d94e1ce51fb930924a93c858baec39883a046daa19f9eb08e283854eed30d3f7504fed17b3e08303749ddaa3ad9adeccca7ed49aa7
- SSDEEP 98304:2lG2U8TnkBhYXAJ5MvP9g12pxJM5eccW6Jz/3ztf28r7eyhecR4oTwrjy:2lSBhYQclgMTJML8Jz/x5rMcN
- TLSH T1354612DAE728543FC8BB193245BA9231A7574D068EC7AB433944362C6D7B2980F5DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
amerludo.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
amerludo.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
amerludo.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target amerludo.apk
- Size 5.3MB
- SHA256 234a6256cb44d57ab1d52489cb6f817a99d7a8d06351c613be0bff40f6cfc4e0
- MD5 004058f76bdd36c39d93d9d77db21131
- SHA1 aa9405910785cb7ba46841f9350bacfc1df47945
- SHA512 027b0d71bb82bb07d8e5a0d94e1ce51fb930924a93c858baec39883a046daa19f9eb08e283854eed30d3f7504fed17b3e08303749ddaa3ad9adeccca7ed49aa7
- SSDEEP 98304:2lG2U8TnkBhYXAJ5MvP9g12pxJM5eccW6Jz/3ztf28r7eyhecR4oTwrjy:2lSBhYQclgMTJML8Jz/x5rMcN
- TLSH T1354612DAE728543FC8BB193245BA9231A7574D068EC7AB433944362C6D7B2980F5DFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.