General
- Target base.apk
- Size 31.6MB
- Sample260803-nv4lhsak2z
- SHA256 5553ac484998f8af0edad13ed81321b6d4fd9d9cf2af98c26faef37e70b66f4b
- MD5 74b146ba02b6630276166ee8502193f2
- SHA1 96f780cb1c62ffb9c41b6f0b77a11ce68729625c
- SHA512 247f725617a1a938e0f9302b4a1fc3aa516f14a08ea15fc35c1850aa3b5bf7dad156a1f8875697bf7d8a46bdfacb6a33b4bcdfa9b3541138fc13925e2dc90790
- SSDEEP 786432:m+hP/v5fldgj7g6gnDVMZ0UG82+XmUa85L:my/d2FgDVG2+2m
- TLSH T141770296F55BA812CAD3D27AE52E866071172CF4C3C6B1A334107238AFF79DF8A75640
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
base.apk
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
base.apk
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
base.apk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
base.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral7
Sample
base.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral8
Sample
base.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral9
Sample
base.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral10
Sample
base.apk
Resource
macos-20250619-en
Malware Config
Targets
-
- Target base.apk
- Size 31.6MB
- SHA256 5553ac484998f8af0edad13ed81321b6d4fd9d9cf2af98c26faef37e70b66f4b
- MD5 74b146ba02b6630276166ee8502193f2
- SHA1 96f780cb1c62ffb9c41b6f0b77a11ce68729625c
- SHA512 247f725617a1a938e0f9302b4a1fc3aa516f14a08ea15fc35c1850aa3b5bf7dad156a1f8875697bf7d8a46bdfacb6a33b4bcdfa9b3541138fc13925e2dc90790
- SSDEEP 786432:m+hP/v5fldgj7g6gnDVMZ0UG82+XmUa85L:my/d2FgDVG2+2m
- TLSH T141770296F55BA812CAD3D27AE52E866071172CF4C3C6B1A334107238AFF79DF8A75640
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
3System Checks
3