General
- Target Quest Tools - dex.apk
- Size 31.7MB
- Sample260810-pg8hzsgr9v
- SHA256 d2c6da76cf42643bb1d92e14e23dce5d3efb35771ffa8535aaecd51fd94405ce
- MD5 22ddaeabef4a360a42294d695e699138
- SHA1 63b7d2d1ab5d088c1fbed22f9746337f371f9541
- SHA512 38a959ca21f73f3f068d43642768de8caed1cca86010ec84ecd0a444ac9b1e8913be199d2657dc0767f9a69741b97dac25b970c7e19eaa5940792471e29ea421
- SSDEEP 786432:bGsPXIwwU8afjxK8jj49RSiTfWqK9GHnnyMhNlPOglet:HbL/L2xWMfl+
- TLSH T1627723C6F7D4A91EC87B50B2CDAE52F2114B4C539A438F839D68324C68B75E41F4ABD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Quest Tools - dex.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
AppPatcher.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral3
Sample
AppPatcher.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral4
Sample
AppPatcher.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
Singularity.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
magisk.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral7
Sample
stub.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral8
Sample
stub.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral9
Sample
stub.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target Quest Tools - dex.apk
- Size 31.7MB
- SHA256 d2c6da76cf42643bb1d92e14e23dce5d3efb35771ffa8535aaecd51fd94405ce
- MD5 22ddaeabef4a360a42294d695e699138
- SHA1 63b7d2d1ab5d088c1fbed22f9746337f371f9541
- SHA512 38a959ca21f73f3f068d43642768de8caed1cca86010ec84ecd0a444ac9b1e8913be199d2657dc0767f9a69741b97dac25b970c7e19eaa5940792471e29ea421
- SSDEEP 786432:bGsPXIwwU8afjxK8jj49RSiTfWqK9GHnnyMhNlPOglet:HbL/L2xWMfl+
- TLSH T1627723C6F7D4A91EC87B50B2CDAE52F2114B4C539A438F839D68324C68B75E41F4ABD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10 -
- Target AppPatcher.apk
- Size 7.1MB
- SHA256 a29bd0fa544b2d017a7a4523764e32dab415adeeefccbfb9ec899454dd249fa6
- MD5 d37d7e3021f1f400b2b8f03e11f0d6c8
- SHA1 14980c9dfb564430ae6bb8740d8d4006e7f2f64c
- SHA512 b669f462e835d215522c4a7494558b70b3cd2308a36896e0437365db92bea722c0be49d65d562c8c060f7a122bd0a26f9cfa2b4b8221e3dac0e3b92d0dcff2d0
- SSDEEP 49152:2eBflv1wHvttNNEq3ggd3UahrB1yz4BTGZV1FoALACj6NYRidzI2SQw:2eBtv1wHVtNNpGz1FziG
- TLSH T172764B15B74ACB0AC4C2B7705DEF2364AB21EC5A5F59079B8602F12CBC727BD5E0AB41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Singularity.apk
- Size 27.6MB
- SHA256 bfb1cb040df5fb4fc1d3d1c41beabd715b37fa768bc2106fcd8b87108fcc9364
- MD5 9581b9d9542bf0fccd19293e153490e8
- SHA1 5b653a19cdaf1ec4b48e98d5806b9644242a5221
- SHA512 1a0931194b6528e189b45f5d3eb4916d7bcc6d525fa21551e3b4145ee2dfd8bdf6c243f0cac06f22aad16f67e5168c8513f688c932a8baad48cd41f736fe1a99
- SSDEEP 393216:oFQhjbv5zqnKcFT70S7PO21wq79s+d+TfLThQ:JhROKc+SDOdg9l0Tfvu
- TLSH T1B4578E1ED7A91D3DC4CD917FEA3402A39734AEAE4EC2035222D5A6F10EEF1E119635B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target magisk.apk
- Size 5.7MB
- SHA256 bed5fb4e55dc3ded39653298b3995b30559efde0387e1104e7f521f6bba139ae
- MD5 fc0973c53534fa2fe10f67a8f730632c
- SHA1 858155bd29951651b66414ef3b9459e9d87e6737
- SHA512 7afdf50a12dbe541114175ec454828a9823db19133109b4659d8979ae819039b8e27ebfbc04f10b6ae14d77121d2e1690871b0019910ae6865988b144f13000c
- SSDEEP 98304:WkL1timAAl2FoW0yfseNRru5oLB2jk/EDwGYShSfUX+WGFrSyfQ:552FoW0MAgB2o2w1/fUXgfQ
- TLSH T15A56028ABF4CBA2BC87640764B929B36315A8C258F43D7037854372D78736F84F59AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10 -
- Target stub.apk
- Size 80KB
- SHA256 f0f6138cd9c33f6c2a917b21a0f2d880068d983ac11cacff8f91b4cef1b3c022
- MD5 7eb7b6f07d788a3adcc667b918aef1c6
- SHA1 995627ae51de3224a85568c71ee98bff469d057e
- SHA512 0550b10b14f2bf16ad41ad83f8b4a259677f2e2c93f3ea75ea88d3d39ffa7b67f8fd9120e0239b01492c6b3cadf5b405e485bb37879a286ea050c8759f7347ed
- SSDEEP 1536:T2K9wRPlgagu+WPPjNlRBvC96+BBUhsl85hwz9y35Hub:gPlFgJWPPjNl7C96QB+sahwRK9ub
- TLSH T10E83DF4247C99E7FDD3451BF5642AF3228F7893192ABC74250513E69B893ACC8F399C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Queries information about active data network
-
Requests dangerous framework permissions