General
- Target Rolling_Sky_v3.4.5_MOD.apk
- Size 74.2MB
- Sample260717-3rhl7sdt3v
- SHA256 446ed6a2b672a04820f730dad8f8b5d20515c7cda1c0e65e01db614262e5ca42
- MD5 8d1b83314e6b66d1877883d94b630543
- SHA1 d66c3e1ce634f6113bf9cdc43f0ddbbd83623335
- SHA512 3306d39e3e32eb3e499356476dc81c0de3674524d57de0a4456398235fe40eca7314b38a32834db5206d08ff929a9ca4b3b5abf13faa92866f43debda317304f
- SSDEEP 1572864:py8aRovdy9PQUBzmtqf4Z/d2sVxH+qdnvxBfa2b4mvkE1z+DjUmaqkoUiKk:pZIldqqf4asfH+qdvxoi4mss+fUfffk
- TLSH T109083341EA68DD86CE7B447B86E514FE12158C3A0AC3A24BB58C338859B77C05EC77E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Rolling_Sky_v3.4.5_MOD.apk
Resource
android-x64-arm64-20260325-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target Rolling_Sky_v3.4.5_MOD.apk
- Size 74.2MB
- SHA256 446ed6a2b672a04820f730dad8f8b5d20515c7cda1c0e65e01db614262e5ca42
- MD5 8d1b83314e6b66d1877883d94b630543
- SHA1 d66c3e1ce634f6113bf9cdc43f0ddbbd83623335
- SHA512 3306d39e3e32eb3e499356476dc81c0de3674524d57de0a4456398235fe40eca7314b38a32834db5206d08ff929a9ca4b3b5abf13faa92866f43debda317304f
- SSDEEP 1572864:py8aRovdy9PQUBzmtqf4Z/d2sVxH+qdnvxBfa2b4mvkE1z+DjUmaqkoUiKk:pZIldqqf4asfH+qdvxoi4mss+fUfffk
- TLSH T109083341EA68DD86CE7B447B86E514FE12158C3A0AC3A24BB58C338859B77C05EC77E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2