General
- Target SimpMusic-full-universal-release.apk
- Size 51.1MB
- Sample260802-1afp6sxwcs
- SHA256 ab7f827ca2a5898e7c02e1ee281c36b555a5eca01f2954996772fcfe458f4a7d
- MD5 178479546ff09d79d218b46cec9e24df
- SHA1 d604eca2f8bdba45405cc0b0d4bf046e6424d46f
- SHA512 6195e7bc87c0740cf1f4ef6c370199516b2e81db4745bea408a28f71943f875f2bcdb2f1ecdc487684f96876cb4085ce4798bbf13fc968b5a3cdbc4364485a0b
- SSDEEP 786432:Xtwctd9TPXOS3TeaDJJjtfqq8HZpzT5r4cO9UGr8JppTQbsFHlKHxaTpaLtm27Mv:XJtjTWcfRfqq85BW5+pTQbsFFKUpeK
- TLSH T10CC733D7F768082FD8B715B28C7D613967264D0587039B8B7688363D29B35C84F89BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
SimpMusic-full-universal-release.apk
Resource
android-33-x64-arm64-20260708-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SimpMusic-full-universal-release.apk
Resource
android-34-x64-arm64-20260325.1-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
SimpMusic-full-universal-release.apk
Resource
android-35-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target SimpMusic-full-universal-release.apk
- Size 51.1MB
- SHA256 ab7f827ca2a5898e7c02e1ee281c36b555a5eca01f2954996772fcfe458f4a7d
- MD5 178479546ff09d79d218b46cec9e24df
- SHA1 d604eca2f8bdba45405cc0b0d4bf046e6424d46f
- SHA512 6195e7bc87c0740cf1f4ef6c370199516b2e81db4745bea408a28f71943f875f2bcdb2f1ecdc487684f96876cb4085ce4798bbf13fc968b5a3cdbc4364485a0b
- SSDEEP 786432:Xtwctd9TPXOS3TeaDJJjtfqq8HZpzT5r4cO9UGr8JppTQbsFHlKHxaTpaLtm27Mv:XJtjTWcfRfqq85BW5+pTQbsFFKUpeK
- TLSH T10CC733D7F768082FD8B715B28C7D613967264D0587039B8B7688363D29B35C84F89BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)