General
- Target Rubika-4.0.4(www.farsroid.com).apk
- Size 81.1MB
- Sample260723-j5bahaae44
- SHA256 75aa83d7096d557011e29d179f8ff43bf059fcfe68bc3f133bcc61576ce0d5d6
- MD5 5d10fbb7c9358df5a46fbdd2ed6a2664
- SHA1 ac78ad9944451d216edb7153cf12eb6c6e74dd2b
- SHA512 f43942bf133ba331cf048d25da797dd1f502b6282593554962a31bbd07c8b933936f13f7cc58b2bbcae54bb6721b201c30be55db753285398c686252a7a71300
- SSDEEP 1572864:avhVkK0kCUWAf5pN0RJ1RvweQ3DZOU5wJXSTeFAwqEgYKX0eHQpUrC:AXEGWAf5pN0RJnwx1wJigqxEpUG
- TLSH T1101822E7F3348C3DDA770676856A6031E9294E21C702B70F7808B72D69B73E24A497E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Rubika-4.0.4(www.farsroid.com).apk
Resource
android-x64-20260325-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target Rubika-4.0.4(www.farsroid.com).apk
- Size 81.1MB
- SHA256 75aa83d7096d557011e29d179f8ff43bf059fcfe68bc3f133bcc61576ce0d5d6
- MD5 5d10fbb7c9358df5a46fbdd2ed6a2664
- SHA1 ac78ad9944451d216edb7153cf12eb6c6e74dd2b
- SHA512 f43942bf133ba331cf048d25da797dd1f502b6282593554962a31bbd07c8b933936f13f7cc58b2bbcae54bb6721b201c30be55db753285398c686252a7a71300
- SSDEEP 1572864:avhVkK0kCUWAf5pN0RJ1RvweQ3DZOU5wJXSTeFAwqEgYKX0eHQpUrC:AXEGWAf5pN0RJnwx1wJigqxEpUG
- TLSH T1101822E7F3348C3DDA770676856A6031E9294E21C702B70F7808B72D69B73E24A497E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Reads the content of photos stored on the user's device.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1