General
- Target PinUpzQpxmg.apk
- Size 11.5MB
- Sample260723-akyevsbl8s
- SHA256 df7a34de1dce539cd125a5253bcedb1d409744456e3c38c6906b0cf9167b4c8c
- MD5 95920805c636b4d4059771762b34e34f
- SHA1 f6df8f9b41070db530c9c30389a2cc9136016a5f
- SHA512 51902cbf23fccbfb8a215ca76993ae4f4ad74b81ebd5b92b682209755d3a2876b1442edcb055940f1ab4ec39ce5c9b42c2e6cd1cf6c7b8d6c4679fdc0a95dd65
- SSDEEP 196608:yM1J1G4utVzV7P7OYA3Qj2pGOVYNxqjG3gr8fKhsbDvJJHKd:L1WXtVzV7P7Olm2QNx3grphQPS
- TLSH T1F9C612D6F7D8A92FD4339036C9AA56B2514B4C128E83DF877958770C29B79C40F4ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PinUpzQpxmg.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
PinUpzQpxmg.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
PinUpzQpxmg.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PinUpzQpxmg.apk
- Size 11.5MB
- SHA256 df7a34de1dce539cd125a5253bcedb1d409744456e3c38c6906b0cf9167b4c8c
- MD5 95920805c636b4d4059771762b34e34f
- SHA1 f6df8f9b41070db530c9c30389a2cc9136016a5f
- SHA512 51902cbf23fccbfb8a215ca76993ae4f4ad74b81ebd5b92b682209755d3a2876b1442edcb055940f1ab4ec39ce5c9b42c2e6cd1cf6c7b8d6c4679fdc0a95dd65
- SSDEEP 196608:yM1J1G4utVzV7P7OYA3Qj2pGOVYNxqjG3gr8fKhsbDvJJHKd:L1WXtVzV7P7Olm2QNx3grphQPS
- TLSH T1F9C612D6F7D8A92FD4339036C9AA56B2514B4C128E83DF877958770C29B79C40F4ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)