General
- Target AG Virus 4.apk
- Size 8.4MB
- Sample260719-wnlfcsay6w
- SHA256 d808eaa184cd0ff4b544972e8399948c1c16a32642ae898b97178c7649d7c587
- MD5 c7cfb3172803732053c9761003e1ae67
- SHA1 941c2fbd04234fd11a6359dca2d15b280b9afb0a
- SHA512 e380a4b7d5fc92d147b66402b0d4246c37c3288ac085616a24dbc1c6a5856401d773e1b429fa50678a48ba79cb4851331cc23d49b09a1a467f2d311ac71161c3
- SSDEEP 98304:WX82qzStC510opobNO8ftRrdp37HW297U8AvkeaiEEppppTJE3KOLDAvjJCpXuji:O/37Ho8AsatJldvjJCpXmvALT+MpWli
- TLSH T17E961245B748E93FC47B723255BB9636418B4C068EC29B93AD087E4CA9B71D40F5AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AG Virus 4.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral2
Sample
AG Virus 4.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
AG Virus 4.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
AG Virus 4.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
AG Virus 4.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
AG Virus 4.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target AG Virus 4.apk
- Size 8.4MB
- SHA256 d808eaa184cd0ff4b544972e8399948c1c16a32642ae898b97178c7649d7c587
- MD5 c7cfb3172803732053c9761003e1ae67
- SHA1 941c2fbd04234fd11a6359dca2d15b280b9afb0a
- SHA512 e380a4b7d5fc92d147b66402b0d4246c37c3288ac085616a24dbc1c6a5856401d773e1b429fa50678a48ba79cb4851331cc23d49b09a1a467f2d311ac71161c3
- SSDEEP 98304:WX82qzStC510opobNO8ftRrdp37HW297U8AvkeaiEEppppTJE3KOLDAvjJCpXuji:O/37Ho8AsatJldvjJCpXmvALT+MpWli
- TLSH T17E961245B748E93FC47B723255BB9636418B4C068EC29B93AD087E4CA9B71D40F5AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks Android system properties for emulator presence.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Reads the contacts stored on the device.
Reads the content of SMS inbox messages.
Reads the content of the call log.
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Reads information about phone network operator.
Requests accessing notifications (often used to intercept notifications before users become aware).
Requests changing the default SMS application.
Requests enabling of the accessibility settings.