General
- Target wtf.apk
- Size 7.2MB
- Sample260808-v925kawsbw
- SHA256 34a93b32ac52fb42017dd9d01286d33f481565db53d902612daab02202b4d69a
- MD5 57aa44cebd46fda1b74a6aefd3ac5e71
- SHA1 ce07dd32862d2a4b27df1180e027a1afa5305680
- SHA512 7546105b1221d8ae931db0de6e639473e437881d3f619ee64c4fd98149139881566e0f8d78b4aff64c72f06e20ed4e578481c779532a4b9705dceab961db5161
- SSDEEP 196608:12nu53PcnIKo8AsatJldvjJCpXmvALT+IzQy:JYIgUt5vj06AOU
- TLSH T1C5760289FB48D92BC4775133456B5732518B4C0A9E838763A9A8760C6CB7AC41F9EFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
wtf.apk
Resource
android-33-x64-arm64-20260708-es
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
wtf.apk
Resource
android-x64-20260325-es
7 signatures
900 seconds
Behavioral task
behavioral3
Sample
wtf.apk
Resource
android-x64-arm64-20260325-es
8 signatures
900 seconds
Behavioral task
behavioral4
Sample
wtf.apk
Resource
android-34-x64-arm64-20260325.1-es
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
wtf.apk
Resource
android-35-x64-arm64-20260325-es
7 signatures
900 seconds
Behavioral task
behavioral6
Sample
wtf.apk
Resource
android-x86-arm-20260325-es
9 signatures
900 seconds
Malware Config
Targets
-
- Target wtf.apk
- Size 7.2MB
- SHA256 34a93b32ac52fb42017dd9d01286d33f481565db53d902612daab02202b4d69a
- MD5 57aa44cebd46fda1b74a6aefd3ac5e71
- SHA1 ce07dd32862d2a4b27df1180e027a1afa5305680
- SHA512 7546105b1221d8ae931db0de6e639473e437881d3f619ee64c4fd98149139881566e0f8d78b4aff64c72f06e20ed4e578481c779532a4b9705dceab961db5161
- SSDEEP 196608:12nu53PcnIKo8AsatJldvjJCpXmvALT+IzQy:JYIgUt5vj06AOU
- TLSH T1C5760289FB48D92BC4775133456B5732518B4C0A9E838763A9A8760C6CB7AC41F9EFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Reads the contacts stored on the device.
-
Reads the content of SMS inbox messages.
-
Reads the content of the call log.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
Requests changing the default SMS application.
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Tasks
static1
Score
6/10
behavioral1
Score
1/10
behavioral2
collectiondiscoverypersistence
Score
7/10
behavioral3
collectioncredential_accessdiscovery
Score
7/10
behavioral4
Score
1/10
behavioral5
collectioncredential_accessdiscovery
Score
7/10
behavioral6
collectioncredential_accessdiscoveryimpactpersistence
Score
7/10