General
- Target sysorbit.apk
- Size 2.0MB
- Sample260810-agkdtsxgrc
- SHA256 f1d67dc388635f8e854dcd04b7a2c423ee64d60f21a760104ba4a679ebe3f46d
- MD5 2421f233e9c2756f533a12f3bc826f80
- SHA1 188cc3b633d9f4b919c96483fd62f9bfd51e26d4
- SHA512 bd94701611f5d8c8b5edb914c1ab6d23189041a45b896688e9169b3d6615237bac0fbab9cb68c09f69288ffd07c931befddae76df42263320b8e32cfe4061c90
- SSDEEP 49152:oKlhbL8H0TjeLwwiifZdeIfko16ES1CalzVugoPC3POM:oKlhbL8H03eLzZdnko1TLPC3PD
- TLSH T180A5CE8EF719B52FC47E153219BAD23512638D468D83AB476588372CA9772C80F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
sysorbit.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target sysorbit.apk
- Size 2.0MB
- SHA256 f1d67dc388635f8e854dcd04b7a2c423ee64d60f21a760104ba4a679ebe3f46d
- MD5 2421f233e9c2756f533a12f3bc826f80
- SHA1 188cc3b633d9f4b919c96483fd62f9bfd51e26d4
- SHA512 bd94701611f5d8c8b5edb914c1ab6d23189041a45b896688e9169b3d6615237bac0fbab9cb68c09f69288ffd07c931befddae76df42263320b8e32cfe4061c90
- SSDEEP 49152:oKlhbL8H0TjeLwwiifZdeIfko16ES1CalzVugoPC3POM:oKlhbL8H03eLzZdnko1TLPC3PD
- TLSH T180A5CE8EF719B52FC47E153219BAD23512638D468D83AB476588372CA9772C80F5EFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.