General
- Target leeapk multi app.apk
- Size 18.4MB
- Sample260719-ke1cdaav2y
- SHA256 bed89f93233264e771c3db7178bb39394ac05fc119f50d3269aa4ffbc8976eae
- MD5 f2cf61aa406845b418a14ce1d2279654
- SHA1 3bf428f9db9924b26ceb0b954058baf8751a17a8
- SHA512 4a2fdf5e5b32eab60a334b849e561e830548f14634bea39df409ecb1bcc773d773ad19e27d76f20b7accef170d7f3dc5d01a6ed97711a6247aecaf6715068a96
- SSDEEP 393216:qmIf7ldHoMXo+2bvRthMwPeoUMwU9K9MYvfHPbW0:q/ldHoP+aj+wPeoURmKJ
- TLSH T18F17338AF30D902BC47B72768EBB637342468C4A4583A7572A4D724C29F75846F5FF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
leeapk multi app.apk
Resource
android-33-x64-arm64-20260708-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ext.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ext.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ext.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target leeapk multi app.apk
- Size 18.4MB
- SHA256 bed89f93233264e771c3db7178bb39394ac05fc119f50d3269aa4ffbc8976eae
- MD5 f2cf61aa406845b418a14ce1d2279654
- SHA1 3bf428f9db9924b26ceb0b954058baf8751a17a8
- SHA512 4a2fdf5e5b32eab60a334b849e561e830548f14634bea39df409ecb1bcc773d773ad19e27d76f20b7accef170d7f3dc5d01a6ed97711a6247aecaf6715068a96
- SSDEEP 393216:qmIf7ldHoMXo+2bvRthMwPeoUMwU9K9MYvfHPbW0:q/ldHoP+aj+wPeoURmKJ
- TLSH T18F17338AF30D902BC47B72768EBB637342468C4A4583A7572A4D724C29F75846F5FF88
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
- Target ext.jar
- Size 11KB
- SHA256 1f0d72279da5436e9ddac4ba21b361de5381a510ad59b604f91f357c37cb4d0b
- MD5 2079ccf9424b58d9e2ec6e41ef2fe306
- SHA1 b09b1aa588addb8f03fa4614ea1f1601b2020f17
- SHA512 1c8247e868c287fdde615b640ebb34554d7a0f6db055f604cee2de3988fb664c3e8bca40396eaa067d78e62a1e4a3f1d6cdc323a90a16e798d6626474dd3649a
- SSDEEP 192:pRKbw8mjiVvhTtP6PqHdXBnNjmwT+uHLuSCa2VY1FYBL:TN8melhTtP6Pq9XFhzT4xL
- TLSH T15132AEFAF75C405CF14A5230A4CD4953A836829EC0693F15B128FA9ABE375EC4F446E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10