General
- Target app-release.apk
- Size 8.0MB
- Sample260708-pg8tragv4p
- SHA256 c286b816e7569101a69b9f3ca87ad1a0432e3e637fdd04c8e6af1d97aa3a7564
- MD5 05e7353cef4bd6c5547cea8f5533f832
- SHA1 2f8d50a9dad87e89c641d1995708bf028122eccf
- SHA512 db6eea8331224602945ccbcd207726c4b9cfd437f9adab4c4141e1dabf96c22549a50ce0e6575572bb3bb59a6d1c9c959854739a53e4652fbfbf8f4cfc7f6de4
- SSDEEP 98304:nsRka4gpvBdnjNDHDrqP993C/ued2Zr1+vw:urrqPfy/DI
- TLSH T1E486CF86F7685A2FCC7641321DAA5231229B4C978E8397877944375C78B76F80F89BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target app-release.apk
- Size 8.0MB
- SHA256 c286b816e7569101a69b9f3ca87ad1a0432e3e637fdd04c8e6af1d97aa3a7564
- MD5 05e7353cef4bd6c5547cea8f5533f832
- SHA1 2f8d50a9dad87e89c641d1995708bf028122eccf
- SHA512 db6eea8331224602945ccbcd207726c4b9cfd437f9adab4c4141e1dabf96c22549a50ce0e6575572bb3bb59a6d1c9c959854739a53e4652fbfbf8f4cfc7f6de4
- SSDEEP 98304:nsRka4gpvBdnjNDHDrqP993C/ued2Zr1+vw:urrqPfy/DI
- TLSH T1E486CF86F7685A2FCC7641321DAA5231229B4C978E8397877944375C78B76F80F89BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2