General
- Target dramalive.apk
- Size 29.1MB
- Sample260709-ryt32acy8w
- SHA256 a3ab61b5aaa6adf028358db75415158484500eee9ea36461d0605368e8f78d55
- MD5 3954b8ccfcd72b87f096eeb9593bd34a
- SHA1 a0dd09e26b17f7f1bf5f7aedab1423c6b5ee5fa3
- SHA512 0bb7a4f813a33b2e9794f3085e95b860e582dbfba72266391c7538fd422e7f49947be58f7e6c01efbd8377922fe623eccfdee79235492594c586f294492ac558
- SSDEEP 786432:G888fLBpePqxWCa1/I/ufMRm49zH4bcLchZN8t2uh:G88QLPOqxWCadkgI4fZyn
- TLSH T12D6723E7F729582FD8BB25B28D2A0132AB660E058783B71B3444762C6D736D84F4DBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
dramalive.apk
Resource
android-x64-arm64-20260325-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target dramalive.apk
- Size 29.1MB
- SHA256 a3ab61b5aaa6adf028358db75415158484500eee9ea36461d0605368e8f78d55
- MD5 3954b8ccfcd72b87f096eeb9593bd34a
- SHA1 a0dd09e26b17f7f1bf5f7aedab1423c6b5ee5fa3
- SHA512 0bb7a4f813a33b2e9794f3085e95b860e582dbfba72266391c7538fd422e7f49947be58f7e6c01efbd8377922fe623eccfdee79235492594c586f294492ac558
- SSDEEP 786432:G888fLBpePqxWCa1/I/ufMRm49zH4bcLchZN8t2uh:G88QLPOqxWCadkgI4fZyn
- TLSH T12D6723E7F729582FD8BB25B28D2A0132AB660E058783B71B3444762C6D736D84F4DBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.