General
- Target ztorg.apk
- Size 1.6MB
- Sample260727-kzbjrazbkc
- SHA256 8a604ce671eb41616b04caca7149d5486aa8c102e4042fc312ee70bab7adcd27
- MD5 70807daaefbdd2489a998e4e42413e16
- SHA1 a9eb3caca43bdb5dc4d44c0c159bd76d58d4093c
- SHA512 dd743d60874f313c4c11e33cf682ea907d9d2a24f99c35b52ef4d4d22a44a39c49f2ecb965a8dfc67c6ae9d62f86e9bac05c1b0cb45e83a49258492565827462
- SSDEEP 24576:Wsb36gLDVuJdinakXC+Mw5MyofFzy89HziQNCL3xKyG/S1NXXnSp++R3b:FbKMadgS9se889Hv0L3Ay1BXnSp+c
- TLSH T17C85E0D1E30EB423D9BBC93642B58B3A42898C15C746E3161A65F27C5EBFBD44A84FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ztorg.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ztorg.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ztorg.apk
- Size 1.6MB
- SHA256 8a604ce671eb41616b04caca7149d5486aa8c102e4042fc312ee70bab7adcd27
- MD5 70807daaefbdd2489a998e4e42413e16
- SHA1 a9eb3caca43bdb5dc4d44c0c159bd76d58d4093c
- SHA512 dd743d60874f313c4c11e33cf682ea907d9d2a24f99c35b52ef4d4d22a44a39c49f2ecb965a8dfc67c6ae9d62f86e9bac05c1b0cb45e83a49258492565827462
- SSDEEP 24576:Wsb36gLDVuJdinakXC+Mw5MyofFzy89HziQNCL3xKyG/S1NXXnSp++R3b:FbKMadgS9se889Hv0L3Ay1BXnSp+c
- TLSH T17C85E0D1E30EB423D9BBC93642B58B3A42898C15C746E3161A65F27C5EBFBD44A84FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.