General
- Target 262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.zip
- Size 2.9MB
- Sample260706-bema3scx2n
- SHA256 38c3cc9e59995f425ae3f01c8ad2482d7fccaecdbd9d46b076255135d533f613
- MD5 c25dd7e26694d8409190fa0242a5e2eb
- SHA1 f69005fe8cd7e6a2235b1451f1647418edd499bb
- SHA512 1fac28cc6f860c7a1d5dcce3c7d097e8ce8da6d0820cbac4b6f76daf45aecd517646fd8e78d2c0f268b6dbe9b1e51cb95740b9d1c6bbaffa2f95f37022f27a40
- SSDEEP 49152:8n3KC9K92xt5TQ0/8mwG+fBSDPAWcxG6xJeEcHMEEEvhxgsciQH5Bl/Gm/Kzvcix:8nBt5TQUmfke86veRHtj5xgsQ78/sXFm
- TLSH T18DD5332330E86608F5C15DC15A4B9654816ADFAFE6418FF227070B8D910B95F3A3EDAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target 262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c.apk
- Size 2.9MB
- SHA256 262e1c40fb33ac2cfb766cb277505f6ebdf0851252a33a83859a3bfb3e54af8c
- MD5 757504c912cc6439cbb246d9ee970562
- SHA1 08d03b074a46a076432098fd3fa43524402aa01f
- SHA512 1a6901f88909db823a899bfd58892bbc2052c11c2f6e6828dfed3467bebcd47720bd7c1b4b31cd43c3fa6711d6c0882f15910221779e6772e6181b9beb779e84
- SSDEEP 49152:Wa60b9F3LYxp65MjYcyNkOAwLSaycQTgHgVDs1JGkyut4TFAnjbfleuwfPG17n+y:K0F3okcckdw3mgHk4z2Onjbflb7n+QzX
- TLSH T1BDE533D35AC98A1DDFDFA1B047A160EA252FAFE8C501B55A25B4336D0473CC34BA8F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
3System Checks
3Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1