General
- Target m1.apk
- Size 5.2MB
- Sample260710-ryfkmsbs8m
- SHA256 6871a82bd97a8dcfa2c29a0fc0aa80a746c4633703ec6c239afa329816330c5b
- MD5 fadc7681f759d660e6d6c6d24e7c192e
- SHA1 113ba42b60b9bc5a6478190d3c2be4a675cec2ae
- SHA512 f2b7ef63b0f01ebeab1f2df10e820710de7276aac0b9725286ceffa1c64cc5001c569b735af049eea60c703df7eb09f4db1ded11137a8acf40cb3f98a781b946
- SSDEEP 98304:O93h7/1NUNV5BBKg6bCbd2ZrRgO3JCPJmO6O6BSioQozKT:O9s5LKg6x3wPJmrjtoVKT
- TLSH T10E46DF46E708A92BC4F7933355BA1A31014B5D668F83D6C76908B37C19B76F01E89BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
m1.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target m1.apk
- Size 5.2MB
- SHA256 6871a82bd97a8dcfa2c29a0fc0aa80a746c4633703ec6c239afa329816330c5b
- MD5 fadc7681f759d660e6d6c6d24e7c192e
- SHA1 113ba42b60b9bc5a6478190d3c2be4a675cec2ae
- SHA512 f2b7ef63b0f01ebeab1f2df10e820710de7276aac0b9725286ceffa1c64cc5001c569b735af049eea60c703df7eb09f4db1ded11137a8acf40cb3f98a781b946
- SSDEEP 98304:O93h7/1NUNV5BBKg6bCbd2ZrRgO3JCPJmO6O6BSioQozKT:O9s5LKg6x3wPJmrjtoVKT
- TLSH T10E46DF46E708A92BC4F7933355BA1A31014B5D668F83D6C76908B37C19B76F01E89BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the SMS messages.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).