General

  • Target
    Stalkie.zip
  • Size 50.7MB
  • Sample260708-b3eadag19w
  • SHA256 932ff86d43fda8e950df7e0733d37894fc979a4bae5f95b0b90c72ccf5c1555b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Stalkie-1.2.5.apk
    • Size 21.6MB
    • SHA256 8358fb631ae3012c4cd77d313db67ec29393bbcc3d9c37b536df31b9531a88cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about active data network

    • Reads information about phone network operator.

    • Checks the presence of a debugger

    • Target
      config.arm64_v8a.apk
    • Size 28.9MB
    • SHA256 a87d1492f2398ea1975a34254a680084a8ad9ad21adfcfa08823e2d97d67f6ac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.en.apk
    • Size 36KB
    • SHA256 5a9b88370d043b215b848d8e01bfcbc74f291de66a5cbf86ff93c3e67f1890df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.nl.apk
    • Size 24KB
    • SHA256 4782a48cd1dad580a860cd4f1f086d5fc8633f3f6d76c0de03f00fb8c50b361d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.xxhdpi.apk
    • Size 64KB
    • SHA256 959dcf7a29484743459caa290458d2bd27229786c592330ba688d77766d86511
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks