General
- Target Kyrix.apk
- Size 3.6MB
- Sample260707-gxramsa18z
- SHA256 97bf038b9e571782e91f46e8d72beca5c63ac601a480be35ad3da31e79985985
- MD5 5fe61aeae90302b0d01f84e53740248e
- SHA1 21fb518487c2e5431a10a976d5a63512ad25554e
- SHA512 6bf60aee719a188a215dae912232291bfaacabf692db7744a0eff5c9db305034411ce84f2b39b9b17255dd4aaa303b0e8179345c7bb61cd7c250cd17abd65cfe
- SSDEEP 98304:rcyg6OX+RROSv4h4768UhZXs3HPcDnL1xxKnR9LfHD:rlOYO64GPCc3HPcLL1xxKzn
- TLSH T16E060183FBE86E2FCC7780320F9A523166169E12CB52DB0B6948377D68776D80E55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Kyrix.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kyrix.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kyrix.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Kyrix.apk
- Size 3.6MB
- SHA256 97bf038b9e571782e91f46e8d72beca5c63ac601a480be35ad3da31e79985985
- MD5 5fe61aeae90302b0d01f84e53740248e
- SHA1 21fb518487c2e5431a10a976d5a63512ad25554e
- SHA512 6bf60aee719a188a215dae912232291bfaacabf692db7744a0eff5c9db305034411ce84f2b39b9b17255dd4aaa303b0e8179345c7bb61cd7c250cd17abd65cfe
- SSDEEP 98304:rcyg6OX+RROSv4h4768UhZXs3HPcDnL1xxKnR9LfHD:rlOYO64GPCc3HPcLL1xxKzn
- TLSH T16E060183FBE86E2FCC7780320F9A523166169E12CB52DB0B6948377D68776D80E55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger