General
- Target app-release.apk
- Size 27.8MB
- Sample260727-ev1eesvgmf
- SHA256 ec0613c573ab29687829c3e4032b0d0f80ee5712a29b4da92116fa25f51dcaee
- MD5 2bf61e51d4d23993a656ba0a3c86fb61
- SHA1 0a58cfaaaa77b22cf49854ad869c3e64330b91b6
- SHA512 723df21d0ee7929f4e672facec0910d65a605987636a61ed06ceaedc6bc17c4bc81f535490d5a7d61ad54b3571a60169afa70f507731d748b8f4bc611f0aead0
- SSDEEP 786432:+buR5prZk863GW90I64uY+AmJNROexQwrhkBf32u/kFGuSs:nTFZwaI641o/DxvuBWEuSs
- TLSH T1705723C6E7285F2EC8B714B20D5E123D26564D26CB8397476948736C78B36E40F89BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-33-x64-arm64-20260708-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
app-release.apk
Resource
android-34-x64-arm64-20260325.1-en
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
app-release.apk
Resource
android-35-x64-arm64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target app-release.apk
- Size 27.8MB
- SHA256 ec0613c573ab29687829c3e4032b0d0f80ee5712a29b4da92116fa25f51dcaee
- MD5 2bf61e51d4d23993a656ba0a3c86fb61
- SHA1 0a58cfaaaa77b22cf49854ad869c3e64330b91b6
- SHA512 723df21d0ee7929f4e672facec0910d65a605987636a61ed06ceaedc6bc17c4bc81f535490d5a7d61ad54b3571a60169afa70f507731d748b8f4bc611f0aead0
- SSDEEP 786432:+buR5prZk863GW90I64uY+AmJNROexQwrhkBf32u/kFGuSs:nTFZwaI641o/DxvuBWEuSs
- TLSH T1705723C6E7285F2EC8B714B20D5E123D26564D26CB8397476948736C78B36E40F89BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
Score
6/10
behavioral1
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral4
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral5
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral6
defense_evasiondiscoveryexecutionpersistence
Score
8/10