General
- Target Dandy's World Cheats.apk
- Size 7.5MB
- Sample260711-yvsjcsct5s
- SHA256 e95f8a2deca0efa3a12c19737d1ad542aa516e8001382499bc00109127c8a2bd
- MD5 257f43345ed894828f8c59780cc5e115
- SHA1 5739d56ba56ecb6ea17f3ffb8c168f76bddc15ba
- SHA512 1af2e0d464d07e734e598bd73107544fa5fa7d0e337930a7e9e5fda55935eb0b46af052177cc10295b4bb9c664ddc78d703a40d7fdaa5b6e72fc1976956bebc8
- SSDEEP 196608:OFRbpmo8AsatJldvjJCpXmvALT+IzFRZSUH:q8Ut5vj06AOu1
- TLSH T1CC860185FB48E92BC477713245BA5732558B8D068E838753BA087E0CA8B75D40F9EFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Dandy's World Cheats.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral2
Sample
Dandy's World Cheats.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Dandy's World Cheats.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
Dandy's World Cheats.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Dandy's World Cheats.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Dandy's World Cheats.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target Dandy's World Cheats.apk
- Size 7.5MB
- SHA256 e95f8a2deca0efa3a12c19737d1ad542aa516e8001382499bc00109127c8a2bd
- MD5 257f43345ed894828f8c59780cc5e115
- SHA1 5739d56ba56ecb6ea17f3ffb8c168f76bddc15ba
- SHA512 1af2e0d464d07e734e598bd73107544fa5fa7d0e337930a7e9e5fda55935eb0b46af052177cc10295b4bb9c664ddc78d703a40d7fdaa5b6e72fc1976956bebc8
- SSDEEP 196608:OFRbpmo8AsatJldvjJCpXmvALT+IzFRZSUH:q8Ut5vj06AOu1
- TLSH T1CC860185FB48E92BC477713245BA5732558B8D068E838753BA087E0CA8B75D40F9EFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Reads the contacts stored on the device.
-
Reads the content of SMS inbox messages.
-
Reads the content of the call log.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
Requests changing the default SMS application.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3Discovery
System Information Discovery
2System Network Configuration Discovery
2System Network Connections Discovery
1