General
- Target larpgram.apk
- Size 79.4MB
- Sample260724-146tfsthqf
- SHA256 275fd8546dba7cb57a30e0a28e18537635b2346d7f71504ecbfa51974ff0fc71
- MD5 df0fd0cc38054d76f90f9fb5ef62baf7
- SHA1 a4e5328c5744e5c0b743e92259925ff84d95ec75
- SHA512 85bcb0c6d1bcbc39d7f00ee5ec6e24730a40f46d2f9298d432d3abbf252139c9b64c17041a8f4eb57eb5c5ed73cca4f288b5ce31d098747033c7682c99f9336f
- SSDEEP 1572864:CUpHcA16dFcxt+4y96mCjX95I+iH8Cc9vDJWtHxw6zgPa2J2tpES2nV:/RcAEdOLlXJ9LJj6ESIyGSi
- TLSH T1E70823A7E71CAC25C2F283B643B11D67C5090E645703E3A70652B2792FFBBE09945EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
larpgram.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
larpgram.apk
Resource
android-x64-20260325-en
Malware Config
Targets
-
- Target larpgram.apk
- Size 79.4MB
- SHA256 275fd8546dba7cb57a30e0a28e18537635b2346d7f71504ecbfa51974ff0fc71
- MD5 df0fd0cc38054d76f90f9fb5ef62baf7
- SHA1 a4e5328c5744e5c0b743e92259925ff84d95ec75
- SHA512 85bcb0c6d1bcbc39d7f00ee5ec6e24730a40f46d2f9298d432d3abbf252139c9b64c17041a8f4eb57eb5c5ed73cca4f288b5ce31d098747033c7682c99f9336f
- SSDEEP 1572864:CUpHcA16dFcxt+4y96mCjX95I+iH8Cc9vDJWtHxw6zgPa2J2tpES2nV:/RcAEdOLlXJ9LJj6ESIyGSi
- TLSH T1E70823A7E71CAC25C2F283B643B11D67C5090E645703E3A70652B2792FFBBE09945EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Reads the content of photos stored on the user's device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
2System Network Configuration Discovery
2System Network Connections Discovery
1