General
- Target com.kimcy929.screenrecorder_1.2.6.7-349_minAPI23(nodpi)_apkmirror.com.apk
- Size 4.1MB
- Sample260719-wthawsaz91
- SHA256 7de9f9cca026aa2003436faf087d2b57eeaddb5b22971cb07a728a88a5d7fedd
- MD5 9352453802d01472c0dec4f1ed3c0854
- SHA1 97908110d716f0d2b368ae27adaaf2c80b667fda
- SHA512 cb92cea3a83eee754222d6897e65f18f79ec830fc2e0e95db012f34fcdc981dd6fe13ae1818f3601275a4b76ae3d4a338688b604ab1ee026969b009c97a42830
- SSDEEP 98304:LZHaj8bfrZ2acqf2FuiKt14rdz6Vrh0CD5LTx7:LZItac6/iKt6rAVrhblV7
- TLSH T11416CF87F7699E2ACC7240B24D9A6231266A4DE68E8397873D44375C38771F81F49BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
com.kimcy929.screenrecorder_1.2.6.7-349_minAPI23(nodpi)_apkmirror.com.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.kimcy929.screenrecorder_1.2.6.7-349_minAPI23(nodpi)_apkmirror.com.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.kimcy929.screenrecorder_1.2.6.7-349_minAPI23(nodpi)_apkmirror.com.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target com.kimcy929.screenrecorder_1.2.6.7-349_minAPI23(nodpi)_apkmirror.com.apk
- Size 4.1MB
- SHA256 7de9f9cca026aa2003436faf087d2b57eeaddb5b22971cb07a728a88a5d7fedd
- MD5 9352453802d01472c0dec4f1ed3c0854
- SHA1 97908110d716f0d2b368ae27adaaf2c80b667fda
- SHA512 cb92cea3a83eee754222d6897e65f18f79ec830fc2e0e95db012f34fcdc981dd6fe13ae1818f3601275a4b76ae3d4a338688b604ab1ee026969b009c97a42830
- SSDEEP 98304:LZHaj8bfrZ2acqf2FuiKt14rdz6Vrh0CD5LTx7:LZItac6/iKt6rAVrhblV7
- TLSH T11416CF87F7699E2ACC7240B24D9A6231266A4DE68E8397873D44375C38771F81F49BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)