Resubmissions

25/07/2026, 17:31

260725-v37fps1yew10

01/07/2026, 22:44

260701-2n1syafv8l10

General

  • Target
    chiken.apk.signed.tmp.apk
  • Size 16.4MB
  • Sample260725-v37fps1yew
  • SHA256 fabb76c9d0df6d712745755c162e5b533b0a898afed44a2cf10d39822d5d4106
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      chiken.apk.signed.tmp.apk
    • Size 16.4MB
    • SHA256 fabb76c9d0df6d712745755c162e5b533b0a898afed44a2cf10d39822d5d4106
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Requests changing the default SMS application.

MITRE ATT&CK Mobile v16

Tasks