General
- Target app4081007-vnkbjw.apk
- Size 31.4MB
- Sample260723-w2jtpavclb
- SHA256 bd0560d99a7e1df4de8cd371940f868b15479f94af0c80aae92d0fd72a4d0fb7
- MD5 22cfac4f452996a6ad8039c7caedfd16
- SHA1 dd0f3d020cd14e001d9b4a7ce4ae96dcd7c606bc
- SHA512 79a4d9842041b3f64dd15473657c6caaee9ac94f7d53b558fb46d02c5d0832bbd516593decd97d0967bc8949cf4b6dbcf1c6869f4c66e788420927549db95445
- SSDEEP 786432:eNspDaq7VuONtHTBKy7f8ZkFjzfj8HWyEKA3KNga6LkjAo:gSfjtHNKyT8Zk5DwHWyEKA3KNga6kjz
- TLSH T19D77228BF718DE2EC8B710714C4E033A66255D19CB52974B2A08772DBDB32E84F49BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app4081007-vnkbjw.apk
Resource
android-x64-arm64-20260325-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target app4081007-vnkbjw.apk
- Size 31.4MB
- SHA256 bd0560d99a7e1df4de8cd371940f868b15479f94af0c80aae92d0fd72a4d0fb7
- MD5 22cfac4f452996a6ad8039c7caedfd16
- SHA1 dd0f3d020cd14e001d9b4a7ce4ae96dcd7c606bc
- SHA512 79a4d9842041b3f64dd15473657c6caaee9ac94f7d53b558fb46d02c5d0832bbd516593decd97d0967bc8949cf4b6dbcf1c6869f4c66e788420927549db95445
- SSDEEP 786432:eNspDaq7VuONtHTBKy7f8ZkFjzfj8HWyEKA3KNga6LkjAo:gSfjtHNKyT8Zk5DwHWyEKA3KNga6kjz
- TLSH T19D77228BF718DE2EC8B710714C4E033A66255D19CB52974B2A08772DBDB32E84F49BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.