General
- Target grand-theft-auto-vi-1-8.xapk
- Size 176.9MB
- Sample260727-1wl43ssbme
- SHA256 6ec6382ecb43dd36d20d8d806832dee82b93760251a23f686d7edda46f365d56
- MD5 8bb74a6ddcaeeb555f20079e90658488
- SHA1 bc5861ccfc56ff89cef9a2a4bbebe679990ca9aa
- SHA512 63ba7e49af19b195b58c5678865314094430ff5a85ec39136632fc13dfe926c56121c30f3f6f222141d5d4b06f62e9cbff123917ac98cc9041fc77c54ca784cb
- SSDEEP 3145728:mWKQvunnTFCpd7udmCnHaP3SYxteAb7vMOdjyCgleFtlLW+1KC/LjsyB0F:m+GT0pd7upn6fSxuJkQiq5c
- TLSH T1DD983377E8B1CE30BD7E4450CAE46B04F1AA8E7A8F1B492D115733436F99FE094B941A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
com.i.am.city.gangster.sim.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.i.am.city.gangster.sim.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.i.am.city.gangster.sim.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target com.i.am.city.gangster.sim.apk
- Size 209.3MB
- SHA256 fed7d8f61e0dede342b4548fbf012b28d26e2144fbe462c5732319338988ab73
- MD5 479cd4dded300c01b3ebd5c46cbca349
- SHA1 cf2681cd4f067e29b3df14ef955432a447ef7344
- SHA512 e1c9d61d0cac7af8b16386344d33383902d48c6660d4618bba20de70debff8073c30be9ec91e5dbf0357a9a485bc133aab8fa28c8269de279ec51a8276ae3c9d
- SSDEEP 6291456:4aKcwxmtCGVtiArGMcDi4RnzTpgjN/hvIDMgUy:8cwglxTy
- TLSH T180A8F113A7518D32C4BE923A54F68711BB32AE45A74387571406F2ADBCF33C15FAA389
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
- Target config.arm64_v8a.apk
- Size 28.0MB
- SHA256 f47f9779fe24791d63aaf6fd504c745d98d4a2f1b8f1ee1e45cdb11e6d66fa76
- MD5 69d0899688e73d6b8481ea267247ba1f
- SHA1 2083d6c1f162c5782e54d97be27ae5948ccee938
- SHA512 c94801c446ae73c2eae0c6ca96bcdd9df99bbd46c1cb93a1b927e32fc9efa3cc72891cb1d9102efe6881b5cc0450bbc396c885eb7cb1f9456885340424bfe07f
- SSDEEP 786432:ddwdnkonmLG4G60ucyJ2AhR/yZOCKg+QGO8TBR5tVplig1PU/dL:cJkomLGj6jcGhhRqXQQWTdqdL
- TLSH T135573358D2C8C128FC71987E7D6174598306BEFEFAB8086BFACC9847F4D497094A6C52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10