Stalkie.zip
- SHA256 932ff86d43fda8e950df7e0733d37894fc979a4bae5f95b0b90c72ccf5c1555b
Overview
overview
8Static
static
6Stalkie-1.2.5.apk
android-9-x86
8Stalkie-1.2.5.apk
android-10-x64
8Stalkie-1.2.5.apk
android-11-x64
8config.arm64_v8a.jar
windows10-2004-x64
1config.arm64_v8a.jar
windows11-ltsc_2024-x64
1config.en.jar
windows10-2004-x64
1config.en.jar
windows11-ltsc_2024-x64
1config.nl.jar
windows10-2004-x64
1config.nl.jar
windows11-ltsc_2024-x64
8config.xxhdpi.jar
windows10-2004-x64
1config.xxhdpi.jar
windows11-ltsc_2024-x64
1Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Stalkie-1.2.5.apk
Resource
android-x86-arm-20260325-en
android-9-x86
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stalkie-1.2.5.apk
Resource
android-x64-20260325-en
android-10-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Stalkie-1.2.5.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
config.en.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
config.en.jar
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
config.nl.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
config.nl.jar
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral10
Sample
config.xxhdpi.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
config.xxhdpi.jar
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Stalkie.zip
- Size 50.7MB
- Sample260708-b3eadag19w
- SHA256 932ff86d43fda8e950df7e0733d37894fc979a4bae5f95b0b90c72ccf5c1555b
- MD5 a30e6e260f0dc989de56525710ffc649
- SHA1 9c4a3e91d5090f92ab595ab540f3c02b5a4326de
- SHA512 382cbbd92411a10fa17e00baac874e440dbc6395750e3a9f5c6ba8a2ca88d3dc40c25b7c131c35c739bc80408b6a4cd26c3a28918e4b524787f7a758b1a7d277
- SSDEEP 786432:rpmzNWOygMkowuEnrnq9IZ0zgt6L+I6NPZ4vXgKiBC:rgNikbuEO9ISct6z6IvXnh
- TLSH T13FC7D046E60D8932D5DEF17C6E7E0B16B7353468126BC39A781C9248FF872F056B2B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 1 IoCs
description ioc Required to be able to access the camera device. android.permission.CAMERA - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.xxhdpi.apk - Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.nl.apk unpack001/config.xxhdpi.apk - Untrusted Codesign Signers 4 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.nl.apk unpack001/config.xxhdpi.apk
File Explorer
-
Stalkie.zip.zip 50.7MB
-
Stalkie-1.2.5.apk.apk 21.6MB
-
config.arm64_v8a.apk.jar 28.9MB
-
config.en.apk.jar 36KB
-
config.nl.apk.jar 24KB
-
config.xxhdpi.apk.jar 64KB
Stalkie-1.2.5.apk
- SHA256 8358fb631ae3012c4cd77d313db67ec29393bbcc3d9c37b536df31b9531a88cd
- MD5 34b30ad70e60201a94519456a22c885c
- SHA1 f2ad852c98410eeefa05ca28b7f03ebf90944b4c
- SHA512 72212b6d6f790c06b793aa8b1d78ec8487133fc0a473d5c244aa72beb12744808b6f88452e8551fb1dd151c57fd4b2ccee836c3e693223e2059f5a8d7e136f3e
- SSDEEP 393216:Cs+mzXdWW7yoIi1MkoXSrZIEqQrVVq9s3Zqe:CpmzNWOygMkowuEnrnq9IZh
- TLSH T10F37E142B7935D73D2FDEB3856BA5704BF31728D774B63873048A2A89C931C46AC7688
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
5fe46eb9ecf181bac46c5b18cf4c055c4475003d836c9d9e5d940c7b0dda74157337fa6c9b859c1156a5cd55ea506d8a39cb05ba34ce2b2ec8fad31485ee6e8e
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
18:60:4d:86:72:5e:a0:81:f1:4f:1a:63:c5:b1:31:a9:39:c8:1f:77
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jan 18, 2026 - Jan 18, 2056
com.gc.stalki
com.gc.stalki.MainActivity
android.permission.CAMERA
android.permission.INTERNET
com.android.vending.BILLING
android.permission.ACCESS_NETWORK_STATE
com.google.android.gms.permission.AD_ID
com.gc.stalki.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE
com.gc.stalki.MainActivity
android.intent.action.MAIN
com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
io.flutter.plugins.urllauncher.WebViewActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
com.pairip.licensecheck.LicenseActivity
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.sessions.SessionLifecycleService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
androidx.camera.core.impl.MetadataHolderService
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.amazon.device.iap.ResponseReceiver
com.amazon.inapp.purchasing.NOTIFY
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.mlkit.common.internal.MlKitInitProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
com.pairip.licensecheck.LicenseContentProvider
config.arm64_v8a.apk
- SHA256 a87d1492f2398ea1975a34254a680084a8ad9ad21adfcfa08823e2d97d67f6ac
- MD5 719c02f403f38fd02676a4767345234a
- SHA1 bf25e4912782bf28f242000ce0571441484fbcf3
- SHA512 a5c5333d5f9cb1fc0950c6ebdc0aeef4225be21bd54e80aa18dabe26a235f8991a4990841d273d41f9a9554bdcf82ae288bd9bd6480f2a576e8af72cf4662568
- SSDEEP 393216:b+gahFCg/h9LNqd0OXwwe6L+IdhfENPWK/4TltX8rtKiBD:Pzgt6L+I6NPZ4vXgKiBD
- TLSH T19E67B04AD51CC932D9CFF07CAF7E0A66B13934780565C0A9AD2D9108FB8B6F146B2F52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
e4439911821a76cfecb6e13d57dbaabd6ba60da1
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
18:60:4d:86:72:5e:a0:81:f1:4f:1a:63:c5:b1:31:a9:39:c8:1f:77
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jan 18, 2026 - Jan 18, 2056
config.en.apk
- SHA256 5a9b88370d043b215b848d8e01bfcbc74f291de66a5cbf86ff93c3e67f1890df
- MD5 277a1231a4564781516d2eced1d4cfc9
- SHA1 bbd6a1871ae8098c174e00cda62c6c8427db7e2a
- SHA512 8cd9cf35c692c743fef3b39b2dd3fb6238023a01dbf15ceb35db96dcb7a444f3ffd003f4106923ba8c3fdf8d486c24064f460bb575b76892b571916497495224
- SSDEEP 384:VEMSScwRHRshUUvUNZUyUtbzpmr58wPfO5AwPShkV9dWD/k:PshPbzpm9/fOJSKED/k
- TLSH T17AF20846BB4492AFCD7782341C5AC295692ABE03CE856F07E232BB5C2977BD44F501F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
eb41377bc971406fa9e49414516bac3ea9cce779
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
18:60:4d:86:72:5e:a0:81:f1:4f:1a:63:c5:b1:31:a9:39:c8:1f:77
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jan 18, 2026 - Jan 18, 2056
config.nl.apk
- SHA256 4782a48cd1dad580a860cd4f1f086d5fc8633f3f6d76c0de03f00fb8c50b361d
- MD5 8a6bd4af9fc09ea5ebffed8fd4638743
- SHA1 2bd62482e65824fe4ee5cd4cddeadf00149089d6
- SHA512 3fe2e3fd06f805811951f8f8feb3683e03144d31ec42edcc24a25b01c585f711cbcac2c6caa0d6ff1c79ade799345861210d391bc82e4da4954cb9122b45afa0
- SSDEEP 384:uerRshnECUxNdSEzwP6tlwP/+pkVMiJRPvRP2:h1sh0Nd706I/1Y
- TLSH T142B25C83DEC5F933CA7BC2351469A699653FD5164A813F0BA261AB0C34F7FE00F581A8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
442bde06648d564e7b58e41cb847ec4029b8b26b
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
18:60:4d:86:72:5e:a0:81:f1:4f:1a:63:c5:b1:31:a9:39:c8:1f:77
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jan 18, 2026 - Jan 18, 2056
config.xxhdpi.apk
- SHA256 959dcf7a29484743459caa290458d2bd27229786c592330ba688d77766d86511
- MD5 7621a5b803ca1996f8678f93bdefdf41
- SHA1 15ee2c00803ff80a943e705bdfe40d8ae341c186
- SHA512 dd16879b3b55b201fc06641c1189d9c5a044d431dead6512b1b3c0abb5e0dac06aba811dd5c1c7c0e9835c134d8b2b0a62dc6b3d868ef7290190c0806bd530eb
- SSDEEP 768:FKKJ/o/2EFeJDyyL1hLcDilPy1mU0bLMOe74Te8O2ldVA6NnoN:FXho/2EFeJpLLcOU0bLMOe7f8O2le
- TLSH T11E537D73E368E42BD927C23883FC5A6B89460E85ED5DB7194E26F70D9EF3A444901BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
53a3cfc20c212affc1fbe383fadf782a1506aa02
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
18:60:4d:86:72:5e:a0:81:f1:4f:1a:63:c5:b1:31:a9:39:c8:1f:77
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jan 18, 2026 - Jan 18, 2056