General
- Target file-manager-plus-3-8-3_Patched.apk
- Size 25.5MB
- Sample260808-zcc7dsdk6t
- SHA256 9f1788eee2b90570ccd2ca5629de00c660857b24157340fc9bb9c26f7365807a
- MD5 b9194d2751be58a497198f1b538b6a4f
- SHA1 9611a9b6ce6209e549be3c77e77e31268f20954f
- SHA512 f2422c8cd77a4d4eee7f25824a70af289a6a243e801f070eb2f4a47d5bbf141f7d5cd77bd87ccf9493b703c56ea12b670430b6f8fd5ccd1e26e35d06d811b482
- SSDEEP 196608:ccQfYc4rLfvkBqxZ+goHk14yFcDWASJ36NE8IpyHNZrdk7XKvJ:chgbrLfvkBLIdsE5pyHNnh
- TLSH T15E47B2B1B7120921D0DA723578FECB51F72D6C8CD7CA7B020408B2B5AD7A6F47AA5187
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
file-manager-plus-3-8-3_Patched.apk
Resource
android-x86-arm-20260325-es
Behavioral task
behavioral2
Sample
file-manager-plus-3-8-3_Patched.apk
Resource
android-x64-20260325-es
Behavioral task
behavioral3
Sample
file-manager-plus-3-8-3_Patched.apk
Resource
android-x64-arm64-20260325-es
Malware Config
Targets
-
- Target file-manager-plus-3-8-3_Patched.apk
- Size 25.5MB
- SHA256 9f1788eee2b90570ccd2ca5629de00c660857b24157340fc9bb9c26f7365807a
- MD5 b9194d2751be58a497198f1b538b6a4f
- SHA1 9611a9b6ce6209e549be3c77e77e31268f20954f
- SHA512 f2422c8cd77a4d4eee7f25824a70af289a6a243e801f070eb2f4a47d5bbf141f7d5cd77bd87ccf9493b703c56ea12b670430b6f8fd5ccd1e26e35d06d811b482
- SSDEEP 196608:ccQfYc4rLfvkBqxZ+goHk14yFcDWASJ36NE8IpyHNZrdk7XKvJ:chgbrLfvkBLIdsE5pyHNnh
- TLSH T15E47B2B1B7120921D0DA723578FECB51F72D6C8CD7CA7B020408B2B5AD7A6F47AA5187
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1Virtualization/Sandbox Evasion
2System Checks
2