General
- Target dramalive.apk
- Size 29.1MB
- Sample260709-rrthxscx4s
- SHA256 a3ab61b5aaa6adf028358db75415158484500eee9ea36461d0605368e8f78d55
- MD5 3954b8ccfcd72b87f096eeb9593bd34a
- SHA1 a0dd09e26b17f7f1bf5f7aedab1423c6b5ee5fa3
- SHA512 0bb7a4f813a33b2e9794f3085e95b860e582dbfba72266391c7538fd422e7f49947be58f7e6c01efbd8377922fe623eccfdee79235492594c586f294492ac558
- SSDEEP 786432:G888fLBpePqxWCa1/I/ufMRm49zH4bcLchZN8t2uh:G88QLPOqxWCadkgI4fZyn
- TLSH T12D6723E7F729582FD8BB25B28D2A0132AB660E058783B71B3444762C6D736D84F4DBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
dramalive.apk
Resource
android-35-x64-arm64-20260325-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target dramalive.apk
- Size 29.1MB
- SHA256 a3ab61b5aaa6adf028358db75415158484500eee9ea36461d0605368e8f78d55
- MD5 3954b8ccfcd72b87f096eeb9593bd34a
- SHA1 a0dd09e26b17f7f1bf5f7aedab1423c6b5ee5fa3
- SHA512 0bb7a4f813a33b2e9794f3085e95b860e582dbfba72266391c7538fd422e7f49947be58f7e6c01efbd8377922fe623eccfdee79235492594c586f294492ac558
- SSDEEP 786432:G888fLBpePqxWCa1/I/ufMRm49zH4bcLchZN8t2uh:G88QLPOqxWCadkgI4fZyn
- TLSH T12D6723E7F729582FD8BB25B28D2A0132AB660E058783B71B3444762C6D736D84F4DBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network