General
- Target com.messaging.textmessage.messages.sms_29.0.xapk
- Size 26.4MB
- Sample260716-dnfk1afv2v
- SHA256 721038816079e39f95b41461f20ccbf77af20bd22b8a6c71da228bdfa9675413
- MD5 a4878822e858617daeeac73a5d9f9629
- SHA1 d82cfbbcd997fca26216ce829bd39c0141a81ec7
- SHA512 0f464a0fe892ae9c8b536cde469f2e911f2c22f1029aae8068fe11938b75eebde7cf5a89ebc652387873a6864d049e3a1a4e31c44656c25935c99452be1d7f07
- SSDEEP 786432:YZY9dYVrRX3FCDZK3bIDoVR3bcxEki+nJcFv4H:Ycd0VX3aZKrI0XgGk4WH
- TLSH T1DD57F14AF61CD52BD9E5B0BC8D8B17A3B5667D110A10C18B3821B30DF9B37D49B26BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
com.messaging.textmessage.messages.sms.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.messaging.textmessage.messages.sms.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.messaging.textmessage.messages.sms.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target com.messaging.textmessage.messages.sms.apk
- Size 18.2MB
- SHA256 88c79b2b30946e359d9f24329ac4ea22ff62c6051eda5ee731d42ab9c97ced64
- MD5 9a6d0a20f571b86f8a5615e1ef6e4821
- SHA1 2a41f9cc600dbe727a34efeab975e4ba59733308
- SHA512 208e3873f8b0b4a89ba016b4def5938d9eaefa20203fc7d8522ce5f22b41da797ee91ca7cbd14d53a73435fdfc44de41522dd73e9a41b52e783ebc123e49dea0
- SSDEEP 393216:E1ZYrSEdOFVSWRX3LFnjn+FDZK3WDGR2PFWe/HmwIPVR3JdcxEki+nW:uZY9dYVrRX3FCDZK3bIDoVR3bcxEki+W
- TLSH T158171267F32CAA1FD87610328C6AB275815E9F118E82A7877908734D39B79D40F69FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
- Target config.arm64_v8a.apk
- Size 8.2MB
- SHA256 4955de231a7abd54604bd8ff9910019a97c4fa156fd570bb75a22dc46b461836
- MD5 df0d71412802c7050c0fd3314eebb57c
- SHA1 cc238fbb6420fc703c254679253ac4a3ca275565
- SHA512 e31dd74dfac11554dfae67a0e9c553ba334b618752bd7c99fe1937bc4a12290ece40a29e230c91c52602ba9cb40e70e77af5927cf90329cb65243224d20ac092
- SSDEEP 98304:RrQMgCunlR7t07CjKwMuqWbUK4c770Bn5MOTIOQP2jEF4ACWClFg:RrQxCunKGjKwMuqBW701QCOAli
- TLSH T114867C49F90DD526DEC9F0BCCE8B0BD3B96278551614C08B2832860DFDA37D59A627F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10