General
- Target Forbidden+Playground_1.0.0_APKPure.apk
- Size 53.5MB
- Sample260712-e1kk6acy5k
- SHA256 e68791c3ebcbef3a0f3b2b9093fb852085cf5d3eeff47f1a70722cef284a8123
- MD5 cee316202496e9b99954bc6e774e3f17
- SHA1 03037b935c80deb0133a1ba9fe1a26ae5b596a87
- SHA512 28fcd17ba47a8e8f6c8acf338dc729a84216ad4fb04b78a2880fb118e362098f271d6ad8a0c142840b450fa84902048a949c9d3f48395b0f2fda403d0245d081
- SSDEEP 1572864:QPSrza9x10YK1nHWCWsCD/7flitfBNBfXSUR5xsoAd4n:MSo1gnHWCWsCD/7flitfBNBfXSUR5xsw
- TLSH T1F9C7BF07F60ACCABCCC6B874954B9371AB207C489222815F7D06F7543E7A7AA1F9D391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Forbidden+Playground_1.0.0_APKPure.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Forbidden+Playground_1.0.0_APKPure.apk
- Size 53.5MB
- SHA256 e68791c3ebcbef3a0f3b2b9093fb852085cf5d3eeff47f1a70722cef284a8123
- MD5 cee316202496e9b99954bc6e774e3f17
- SHA1 03037b935c80deb0133a1ba9fe1a26ae5b596a87
- SHA512 28fcd17ba47a8e8f6c8acf338dc729a84216ad4fb04b78a2880fb118e362098f271d6ad8a0c142840b450fa84902048a949c9d3f48395b0f2fda403d0245d081
- SSDEEP 1572864:QPSrza9x10YK1nHWCWsCD/7flitfBNBfXSUR5xsoAd4n:MSo1gnHWCWsCD/7flitfBNBfXSUR5xsw
- TLSH T1F9C7BF07F60ACCABCCC6B874954B9371AB207C489222815F7D06F7543E7A7AA1F9D391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1