Overview
overview
8Static
static
6Stalkie-1.2.5.apk
android-9-x86
8Stalkie-1.2.5.apk
android-10-x64
8Stalkie-1.2.5.apk
android-11-x64
8config.arm64_v8a.jar
windows10-2004-x64
1config.arm64_v8a.jar
windows11-ltsc_2024-x64
1config.en.jar
windows10-2004-x64
1config.en.jar
windows11-ltsc_2024-x64
1config.nl.jar
windows10-2004-x64
1config.nl.jar
windows11-ltsc_2024-x64
8config.xxhdpi.jar
windows10-2004-x64
1config.xxhdpi.jar
windows11-ltsc_2024-x64
1General
- Target Stalkie.zip
- Size 50.7MB
- Sample260708-b3eadag19w
- SHA256 932ff86d43fda8e950df7e0733d37894fc979a4bae5f95b0b90c72ccf5c1555b
- MD5 a30e6e260f0dc989de56525710ffc649
- SHA1 9c4a3e91d5090f92ab595ab540f3c02b5a4326de
- SHA512 382cbbd92411a10fa17e00baac874e440dbc6395750e3a9f5c6ba8a2ca88d3dc40c25b7c131c35c739bc80408b6a4cd26c3a28918e4b524787f7a758b1a7d277
- SSDEEP 786432:rpmzNWOygMkowuEnrnq9IZ0zgt6L+I6NPZ4vXgKiBC:rgNikbuEO9ISct6z6IvXnh
- TLSH T13FC7D046E60D8932D5DEF17C6E7E0B16B7353468126BC39A781C9248FF872F056B2B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Stalkie-1.2.5.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
Stalkie-1.2.5.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Stalkie-1.2.5.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral6
Sample
config.en.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
config.en.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral8
Sample
config.nl.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
config.nl.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral10
Sample
config.xxhdpi.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
config.xxhdpi.jar
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target Stalkie-1.2.5.apk
- Size 21.6MB
- SHA256 8358fb631ae3012c4cd77d313db67ec29393bbcc3d9c37b536df31b9531a88cd
- MD5 34b30ad70e60201a94519456a22c885c
- SHA1 f2ad852c98410eeefa05ca28b7f03ebf90944b4c
- SHA512 72212b6d6f790c06b793aa8b1d78ec8487133fc0a473d5c244aa72beb12744808b6f88452e8551fb1dd151c57fd4b2ccee836c3e693223e2059f5a8d7e136f3e
- SSDEEP 393216:Cs+mzXdWW7yoIi1MkoXSrZIEqQrVVq9s3Zqe:CpmzNWOygMkowuEnrnq9IZh
- TLSH T10F37E142B7935D73D2FDEB3856BA5704BF31728D774B63873048A2A89C931C46AC7688
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
- Target config.arm64_v8a.apk
- Size 28.9MB
- SHA256 a87d1492f2398ea1975a34254a680084a8ad9ad21adfcfa08823e2d97d67f6ac
- MD5 719c02f403f38fd02676a4767345234a
- SHA1 bf25e4912782bf28f242000ce0571441484fbcf3
- SHA512 a5c5333d5f9cb1fc0950c6ebdc0aeef4225be21bd54e80aa18dabe26a235f8991a4990841d273d41f9a9554bdcf82ae288bd9bd6480f2a576e8af72cf4662568
- SSDEEP 393216:b+gahFCg/h9LNqd0OXwwe6L+IdhfENPWK/4TltX8rtKiBD:Pzgt6L+I6NPZ4vXgKiBD
- TLSH T19E67B04AD51CC932D9CFF07CAF7E0A66B13934780565C0A9AD2D9108FB8B6F146B2F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target config.en.apk
- Size 36KB
- SHA256 5a9b88370d043b215b848d8e01bfcbc74f291de66a5cbf86ff93c3e67f1890df
- MD5 277a1231a4564781516d2eced1d4cfc9
- SHA1 bbd6a1871ae8098c174e00cda62c6c8427db7e2a
- SHA512 8cd9cf35c692c743fef3b39b2dd3fb6238023a01dbf15ceb35db96dcb7a444f3ffd003f4106923ba8c3fdf8d486c24064f460bb575b76892b571916497495224
- SSDEEP 384:VEMSScwRHRshUUvUNZUyUtbzpmr58wPfO5AwPShkV9dWD/k:PshPbzpm9/fOJSKED/k
- TLSH T17AF20846BB4492AFCD7782341C5AC295692ABE03CE856F07E232BB5C2977BD44F501F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target config.nl.apk
- Size 24KB
- SHA256 4782a48cd1dad580a860cd4f1f086d5fc8633f3f6d76c0de03f00fb8c50b361d
- MD5 8a6bd4af9fc09ea5ebffed8fd4638743
- SHA1 2bd62482e65824fe4ee5cd4cddeadf00149089d6
- SHA512 3fe2e3fd06f805811951f8f8feb3683e03144d31ec42edcc24a25b01c585f711cbcac2c6caa0d6ff1c79ade799345861210d391bc82e4da4954cb9122b45afa0
- SSDEEP 384:uerRshnECUxNdSEzwP6tlwP/+pkVMiJRPvRP2:h1sh0Nd706I/1Y
- TLSH T142B25C83DEC5F933CA7BC2351469A699653FD5164A813F0BA261AB0C34F7FE00F581A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target config.xxhdpi.apk
- Size 64KB
- SHA256 959dcf7a29484743459caa290458d2bd27229786c592330ba688d77766d86511
- MD5 7621a5b803ca1996f8678f93bdefdf41
- SHA1 15ee2c00803ff80a943e705bdfe40d8ae341c186
- SHA512 dd16879b3b55b201fc06641c1189d9c5a044d431dead6512b1b3c0abb5e0dac06aba811dd5c1c7c0e9835c134d8b2b0a62dc6b3d868ef7290190c0806bd530eb
- SSDEEP 768:FKKJ/o/2EFeJDyyL1hLcDilPy1mU0bLMOe74Te8O2ldVA6NnoN:FXho/2EFeJpLLcOU0bLMOe7f8O2le
- TLSH T11E537D73E368E42BD927C23883FC5A6B89460E85ED5DB7194E26F70D9EF3A444901BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10