General
- Target pure.apk
- Size 25.4MB
- Sample260805-q2bv7ayerg
- SHA256 d44b99bb97ec14a240b0bbce63d9cfd09000afa728fb6080e95b3ca72c39b62c
- MD5 42e19a374c145580eae38934c292fcce
- SHA1 109812fe2a0b1b83e1b409761e56d8b54ffe40b1
- SHA512 b0e22ccfde508003e02dc1f0efef4c21b7d0916b476512f91d4241dc322c068468fd859a8d8366b15da19ac19e43bfda752e1cb5f518b04c63522749c20ad3f7
- SSDEEP 786432:Gc4X9uGtUXzset27NLHP40974651BGHwiYqX2:GTXUAwzb2BD4A74651BK/Yqm
- TLSH T1DE473388F709B42FD97BD0328A72927261910D55CA53E743A969B21CDAB3BD04F85FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
pure.apk
Resource
android-x86-arm-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
pure.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
pure.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target pure.apk
- Size 25.4MB
- SHA256 d44b99bb97ec14a240b0bbce63d9cfd09000afa728fb6080e95b3ca72c39b62c
- MD5 42e19a374c145580eae38934c292fcce
- SHA1 109812fe2a0b1b83e1b409761e56d8b54ffe40b1
- SHA512 b0e22ccfde508003e02dc1f0efef4c21b7d0916b476512f91d4241dc322c068468fd859a8d8366b15da19ac19e43bfda752e1cb5f518b04c63522749c20ad3f7
- SSDEEP 786432:Gc4X9uGtUXzset27NLHP40974651BGHwiYqX2:GTXUAwzb2BD4A74651BK/Yqm
- TLSH T1DE473388F709B42FD97BD0328A72927261910D55CA53E743A969B21CDAB3BD04F85FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3