General
- Target 3a59035ce30ac0f26bf49d3a0175e530812968614d3870099742258fb336ce6b.apk
- Size 866KB
- Sample260803-qkmalazapg
- SHA256 3a59035ce30ac0f26bf49d3a0175e530812968614d3870099742258fb336ce6b
Score
10/10
Malware Config
Targets
-
- Target 3a59035ce30ac0f26bf49d3a0175e530812968614d3870099742258fb336ce6b.apk
- Size 866KB
- SHA256 3a59035ce30ac0f26bf49d3a0175e530812968614d3870099742258fb336ce6b
Score8/10-
Checks if the Android device is rooted.
-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Defense Evasion
Foreground Persistence
1Input Injection
1Virtualization/Sandbox Evasion
4System Checks
4Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1