General
- Target ducky.apk
- Size 2.0MB
- Sample260715-ede26ady9s
- SHA256 d22d9a9147b8c5b78a60e0775993ad103b6674d2f8468b5b58fae1b23b1561a3
- MD5 7de814bf9fe3c15f7594559baaed17ae
- SHA1 ff5108a433148db17542f258904ee58694e4752e
- SHA512 7f10adccadaa702023da49cbf819c26b1ea2de3b9b003f542feb6abd71e094cb49a9fa110685080585aa40b5a1d341917b309a8a5f6816eb0595a09729741253
- SSDEEP 49152:Vpj2qDqCW+i8gHw03CdaP4gITAFoTwrkp8LC2p:VpurH7CWFoTwrkSeW
- TLSH T17CA57C87F718693FC87711F2496E523266574C078A839B83AD48361C29BB5D83F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ducky.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ducky.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
ducky.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target ducky.apk
- Size 2.0MB
- SHA256 d22d9a9147b8c5b78a60e0775993ad103b6674d2f8468b5b58fae1b23b1561a3
- MD5 7de814bf9fe3c15f7594559baaed17ae
- SHA1 ff5108a433148db17542f258904ee58694e4752e
- SHA512 7f10adccadaa702023da49cbf819c26b1ea2de3b9b003f542feb6abd71e094cb49a9fa110685080585aa40b5a1d341917b309a8a5f6816eb0595a09729741253
- SSDEEP 49152:Vpj2qDqCW+i8gHw03CdaP4gITAFoTwrkp8LC2p:VpurH7CWFoTwrkSeW
- TLSH T17CA57C87F718693FC87711F2496E523266574C078A839B83AD48361C29BB5D83F9DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.