General
- Target PHDULA.VIP01.apk
- Size 3.5MB
- Sample260710-pffftabt7p
- SHA256 26bcca4d9b6d2b88d41e1ea3eae1d094313a81a95e39d943bcf685593aa096ad
- MD5 f22709e8ad20cac8bc59aee0f82b8220
- SHA1 4cc101c0a8ea86b06e83134757df78ebabb156cb
- SHA512 4dd1abbbfc2031504411708dddbfac03a918daa3a699fa71631ca15ac329ee60f8b433b234600e55f23811bd4339b8eaa9b18c94e25304f1cbceee485f4435d3
- SSDEEP 98304:yll/+rjUyOPudo9WR0wGy/vIBKR+cgx6bBR:yL+rjuAl0FBUgAbBR
- TLSH T1C9F50183FB48E96EC9F383368636012765568C66CB53D3875951B3383DBBAC05A85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PHDULA.VIP01.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
PHDULA.VIP01.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
PHDULA.VIP01.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target PHDULA.VIP01.apk
- Size 3.5MB
- SHA256 26bcca4d9b6d2b88d41e1ea3eae1d094313a81a95e39d943bcf685593aa096ad
- MD5 f22709e8ad20cac8bc59aee0f82b8220
- SHA1 4cc101c0a8ea86b06e83134757df78ebabb156cb
- SHA512 4dd1abbbfc2031504411708dddbfac03a918daa3a699fa71631ca15ac329ee60f8b433b234600e55f23811bd4339b8eaa9b18c94e25304f1cbceee485f4435d3
- SSDEEP 98304:yll/+rjUyOPudo9WR0wGy/vIBKR+cgx6bBR:yL+rjuAl0FBUgAbBR
- TLSH T1C9F50183FB48E96EC9F383368636012765568C66CB53D3875951B3383DBBAC05A85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)