General
- Target Metrolist (2).apk
- Size 24.0MB
- Sample260711-cva4esaw2l
- SHA256 0560beb1c6d3caa6aa348212bae28398e839c87e9bde7a0330a54f5c6ddedb49
- MD5 d022c3c1ef78e531ffc17888a23aa60e
- SHA1 2d23749922db55f97fdab3b36de1231f0b437282
- SHA512 436690f5bf6ae82b4012dbfc7407e81f2eca4ae783f9084d6938f18fd4de5f67db19642750ebdf75e7a16c2173823185e6220a9dbcae4a7a84eff4b825bbcac0
- SSDEEP 786432:g/ddEMTbrYAtaTVSpd1NtOPQCR7bibPozhrhSHLeMck:g/ddhrjtaJSpdfAYCR7urAor4k
- TLSH T1E647224AFAD8DA2EC47180774847357522574C2A7E03DAC36A88772D24B7EF44F86ADC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Metrolist (2).apk
Resource
android-34-x64-arm64-20260325.1-es
10 signatures
300 seconds
Malware Config
Targets
-
- Target Metrolist (2).apk
- Size 24.0MB
- SHA256 0560beb1c6d3caa6aa348212bae28398e839c87e9bde7a0330a54f5c6ddedb49
- MD5 d022c3c1ef78e531ffc17888a23aa60e
- SHA1 2d23749922db55f97fdab3b36de1231f0b437282
- SHA512 436690f5bf6ae82b4012dbfc7407e81f2eca4ae783f9084d6938f18fd4de5f67db19642750ebdf75e7a16c2173823185e6220a9dbcae4a7a84eff4b825bbcac0
- SSDEEP 786432:g/ddEMTbrYAtaTVSpd1NtOPQCR7bibPozhrhSHLeMck:g/ddhrjtaJSpdfAYCR7urAor4k
- TLSH T1E647224AFAD8DA2EC47180774847357522574C2A7E03DAC36A88772D24B7EF44F86ADC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)