General
- Target dropper.apk
- Size 9.2MB
- Sample260706-pr4msaa16q
- SHA256 6a32c6deb3d68301b677c7d8cb3d1b533032f838a9d1d1e517d6bf2c39e472eb
- MD5 2353ff11db7382808750ba12d93a5933
- SHA1 efe9a808a9290c97f4290b4855e056d4cfb3e130
- SHA512 23eaac3d0bbe03017616f67aa2bb04a91d926e3d6f4a1738e6e2407ef5158d1348f07d6f72b8a098c4ecfcbd747ae8a5901dc8c378181937e9536e98f5a4aa45
- SSDEEP 196608:uMF0N2GgWNZpH7offSpHHxgB8jp9Pn0tl/SFilSbI0xw02Ce:u40N2GRNb0fIHRJj/kl/SsSbbw02Ce
- TLSH T104A63311E5BF8891600886B423517EE8C59A3AE47733A55F22C4D7E9296CCBCF8F8D35
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
update.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target update.apk
- Size 13.0MB
- SHA256 890ecea4ebe4fea692ad36adf02abeb37c181cb7bdb6122cd52d9aaafe7d6cf3
- MD5 1e2812e17d950099c496b7c756b5abbc
- SHA1 1e64ec113364e37d7a95976dd611779058580994
- SHA512 549158e5e209144c47c678987775e2526b4e27643fe25e0b1b246603edc8fa814be641d773bb0a9b665351afa81a40468bf0aebb2a8092cf1325025460b1c096
- SSDEEP 196608:6sGvZeY8juQgY9/XzKk47nKoBSRuJMC4WPsUl111QlCO/y2:dY8juQtKDBJJMCVsU7PQlfy2
- TLSH T1B6D6D051B7054A32C4AE623379BB4720BB3AAE8DD2835B472508B3787C771D47B663C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: Rokarolla
Rokarolla is an Android banking trojan first seen in 2026.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.