General
- Target hgal.njfouw.ufwuebg.apk
- Size 3.9MB
- Sample260809-dz4f7sge73
- SHA256 3d0f83250ca70f9598a57828219c5e19e44534a63940e0a9abbb375d715aa306
- MD5 9d8bb4163dbe2492f97bd726d5aaa130
- SHA1 bd3650f8f1a3c2c99ac4f5c7a1c94f2d17723e69
- SHA512 b8750d26aa75578b311328d6119a1197ef4bfda82faa11dd7c1aff55d805627d4f55a24dacddada59ff8391f2f6a826d30483c939771990bf3dc55916bc641df
- SSDEEP 98304:tUlr9oY8wqrBeRaHnWKei5Dz3JRo/Krr7L+:tjYbmBHnWK35+
- TLSH T16316CE8BFB48A96AC4F753B24236532251474C2A8B43D6C76D58323C18B76D07F9EBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
hgal.njfouw.ufwuebg.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
hgal.njfouw.ufwuebg.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
hgal.njfouw.ufwuebg.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target hgal.njfouw.ufwuebg.apk
- Size 3.9MB
- SHA256 3d0f83250ca70f9598a57828219c5e19e44534a63940e0a9abbb375d715aa306
- MD5 9d8bb4163dbe2492f97bd726d5aaa130
- SHA1 bd3650f8f1a3c2c99ac4f5c7a1c94f2d17723e69
- SHA512 b8750d26aa75578b311328d6119a1197ef4bfda82faa11dd7c1aff55d805627d4f55a24dacddada59ff8391f2f6a826d30483c939771990bf3dc55916bc641df
- SSDEEP 98304:tUlr9oY8wqrBeRaHnWKei5Dz3JRo/Krr7L+:tjYbmBHnWK35+
- TLSH T16316CE8BFB48A96AC4F753B24236532251474C2A8B43D6C76D58323C18B76D07F9EBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.