General
- Target HanFlow-PDF-Android.apk
- Size 8.2MB
- Sample260720-shpn2sd14j
- SHA256 39e6a5f6ae47a2cdb4d5905ee441d08dad4efc88f2a6e3f360cc0b8ee309caa8
- MD5 b1f67a1ee5c5a5d2c7c55d290c840c85
- SHA1 67abb02c5d1a1bc3c5a51495edfa1f20de5c9e48
- SHA512 565c9e5b60369c83f1f0e42c11458f013a4584c581a78ca21818e00e9772e12a79d4e960ccf7c29b7e9b53c15d0b0d262bcfbcf0c80a8ef853ebea4873515fb3
- SSDEEP 196608:+/uGsDJoqNGz70qFBsfPH3GLMfbAGu8lDv/JyobdJszFC:gqNA32/3N0z8lDv/JyobjMM
- TLSH T1E1862382F7E42D2ECD7245354B5B4675166B8E13D683EB0B8A28322C7C733D44E19BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HanFlow-PDF-Android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HanFlow-PDF-Android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
HanFlow-PDF-Android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target HanFlow-PDF-Android.apk
- Size 8.2MB
- SHA256 39e6a5f6ae47a2cdb4d5905ee441d08dad4efc88f2a6e3f360cc0b8ee309caa8
- MD5 b1f67a1ee5c5a5d2c7c55d290c840c85
- SHA1 67abb02c5d1a1bc3c5a51495edfa1f20de5c9e48
- SHA512 565c9e5b60369c83f1f0e42c11458f013a4584c581a78ca21818e00e9772e12a79d4e960ccf7c29b7e9b53c15d0b0d262bcfbcf0c80a8ef853ebea4873515fb3
- SSDEEP 196608:+/uGsDJoqNGz70qFBsfPH3GLMfbAGu8lDv/JyobdJszFC:gqNA32/3N0z8lDv/JyobjMM
- TLSH T1E1862382F7E42D2ECD7245354B5B4675166B8E13D683EB0B8A28322C7C733D44E19BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger