General
- Target download_34858816.apk
- Size 39.5MB
- Sample260712-ax2caabw4k
- SHA256 be927005a1294caaa8225b8f70bea6d9c2d60253472fa25c756bc7883ab75a6a
- MD5 7dbf5af36302a9b5b15841a84b11c644
- SHA1 579402290f1ce23d0b2fcd1d9ceb4e7a2622010e
- SHA512 1f502b68b5dd015db6b986d63dc7d37a53828013b4b4121bc403bc0c6fd1307ec1dfcad7de82e99ea13fd4bd1ff30735feae74d517fb83b6a79e4c975628cbe2
- SSDEEP 786432:yZyIiAIb7xHU5/rRdd9SKExO0tN3s+q65MBfFiAWbt:yZyIiAIbJSDzdYxO0tpI65MBfxWbt
- TLSH T17197DF53A3169D32C4BD873964BE8740BB305B5697835742205AF3BCFCE37D0AA996C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
download_34858816.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
download_34858816.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
download_34858816.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target download_34858816.apk
- Size 39.5MB
- SHA256 be927005a1294caaa8225b8f70bea6d9c2d60253472fa25c756bc7883ab75a6a
- MD5 7dbf5af36302a9b5b15841a84b11c644
- SHA1 579402290f1ce23d0b2fcd1d9ceb4e7a2622010e
- SHA512 1f502b68b5dd015db6b986d63dc7d37a53828013b4b4121bc403bc0c6fd1307ec1dfcad7de82e99ea13fd4bd1ff30735feae74d517fb83b6a79e4c975628cbe2
- SSDEEP 786432:yZyIiAIb7xHU5/rRdd9SKExO0tN3s+q65MBfFiAWbt:yZyIiAIbJSDzdYxO0tpI65MBfxWbt
- TLSH T17197DF53A3169D32C4BD873964BE8740BB305B5697835742205AF3BCFCE37D0AA996C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
3System Checks
3