General
- Target app-release.apk
- Size 27.8MB
- Sample260727-ev1eesvgmf
- SHA256 ec0613c573ab29687829c3e4032b0d0f80ee5712a29b4da92116fa25f51dcaee
- MD5 2bf61e51d4d23993a656ba0a3c86fb61
- SHA1 0a58cfaaaa77b22cf49854ad869c3e64330b91b6
- SHA512 723df21d0ee7929f4e672facec0910d65a605987636a61ed06ceaedc6bc17c4bc81f535490d5a7d61ad54b3571a60169afa70f507731d748b8f4bc611f0aead0
- SSDEEP 786432:+buR5prZk863GW90I64uY+AmJNROexQwrhkBf32u/kFGuSs:nTFZwaI641o/DxvuBWEuSs
- TLSH T1705723C6E7285F2EC8B714B20D5E123D26564D26CB8397476948736C78B36E40F89BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-33-x64-arm64-20260708-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
app-release.apk
Resource
android-34-x64-arm64-20260325.1-en
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
app-release.apk
Resource
android-35-x64-arm64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target app-release.apk
- Size 27.8MB
- SHA256 ec0613c573ab29687829c3e4032b0d0f80ee5712a29b4da92116fa25f51dcaee
- MD5 2bf61e51d4d23993a656ba0a3c86fb61
- SHA1 0a58cfaaaa77b22cf49854ad869c3e64330b91b6
- SHA512 723df21d0ee7929f4e672facec0910d65a605987636a61ed06ceaedc6bc17c4bc81f535490d5a7d61ad54b3571a60169afa70f507731d748b8f4bc611f0aead0
- SSDEEP 786432:+buR5prZk863GW90I64uY+AmJNROexQwrhkBf32u/kFGuSs:nTFZwaI641o/DxvuBWEuSs
- TLSH T1705723C6E7285F2EC8B714B20D5E123D26564D26CB8397476948736C78B36E40F89BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Acquires the wake lock
Queries information about active data network
Queries the mobile country code (MCC)
Reads information about phone network operator.
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
Score
6/10
behavioral1
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral4
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral5
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral6
defense_evasiondiscoveryexecutionpersistence
Score
8/10