Overview

overview

8

Static

static

6

com.honeyg...om.apk

android-15-x64

8

Resubmissions

16/07/2026, 07:56

260716-jst7vafz3k8

16/07/2026, 07:50

260716-jppg7afy7r8

16/07/2026, 05:44

260716-gfg1msht7w8

15/07/2026, 00:49

260715-a6m61sgx2j8

15/07/2026, 00:18

260715-al32qsgs4k8

14/07/2026, 08:11

260714-j3bs9abw2z8

14/07/2026, 07:55

260714-jser6ag13q8

14/07/2026, 07:35

260714-jeyywabt2y8

14/07/2026, 07:31

260714-jctalsbs718

14/07/2026, 07:25

260714-h81h5abs4t8

Sharing

Copy URL Twitter E-mail

General

  • Target
    com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
  • Size 10.5MB
  • Sample260716-gfg1msht7w
  • SHA256 e82e4e524e7b659b6a13ee51997738f7d75e6a4a33b2937591058d0f994d9bae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
androiddefense_evasiondiscoveryexecutionpersistence

Malware Config

Targets

    • Target
      com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
    • Size 10.5MB
    • SHA256 e82e4e524e7b659b6a13ee51997738f7d75e6a4a33b2937591058d0f994d9bae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistence

    • Checks if the Android device is rooted.

      defense_evasion

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Acquires the wake lock

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Queries information about active data network

      discovery

    • Reads information about phone network operator.

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      defense_evasion
    behavioral1

MITRE ATT&CK Mobile v16

Tasks