General
- Target app-release.apk
- Size 27.9MB
- Sample260802-hycdjseg98
- SHA256 d19d2725b5109f4a78f45fd7208f7dd77c0dbd27bf63c00a1fbecab781027657
- MD5 08b3f20db57afbccfea4efa2c9cda039
- SHA1 fe169c2e5a72a6ddc314857213caded7256d4b76
- SHA512 913aa2f6d173db733dc8b90578ce077eb6b85e34caa2048208fabe4dbb606117512caceb116c039bc5dcfe75ee90943340a649cdfbd7c54d4a0f69d046190fa9
- SSDEEP 786432:zr9sNQEvQB8bm2dcZfZlitEThk/TOwpdhNrIAW/YU:zrWNQONYqETV+6f
- TLSH T187571286E7688E2EC87714B10D5D133E2E664E22CB8397476B58376C78B35E40E45BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-33-x64-arm64-20260708-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
app-release.apk
Resource
android-34-x64-arm64-20260325.1-en
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
app-release.apk
Resource
android-35-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target app-release.apk
- Size 27.9MB
- SHA256 d19d2725b5109f4a78f45fd7208f7dd77c0dbd27bf63c00a1fbecab781027657
- MD5 08b3f20db57afbccfea4efa2c9cda039
- SHA1 fe169c2e5a72a6ddc314857213caded7256d4b76
- SHA512 913aa2f6d173db733dc8b90578ce077eb6b85e34caa2048208fabe4dbb606117512caceb116c039bc5dcfe75ee90943340a649cdfbd7c54d4a0f69d046190fa9
- SSDEEP 786432:zr9sNQEvQB8bm2dcZfZlitEThk/TOwpdhNrIAW/YU:zrWNQONYqETV+6f
- TLSH T187571286E7688E2EC87714B10D5D133E2E664E22CB8397476B58376C78B35E40E45BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
Score
6/10
behavioral1
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral4
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral5
collectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistence
Score
8/10
behavioral6
defense_evasiondiscoveryexecutionpersistence
Score
8/10