General
- Target ntm2616.apk
- Size 121.6MB
- Sample260810-v6aadayzgv
- SHA256 cf15642a46d5213fcce8c760017993c1cb280d8b5c973c09a923175b4e627d98
- MD5 5c9472ef94ca200d48dbbd92f29ff1df
- SHA1 2bc2f31bb1a3d66628648e18f55ed69280928957
- SHA512 09653d33ac4b07d075730addcdb3b5d01ec6ad91b8a676329338816554b2f332bb240ae6d6e45b87b3c54a39dbb40658399c112fc5e950aed711c6d4f6ce610c
- SSDEEP 3145728:W5gzTPeZJkuGeuqt/0OJMB4yI2xYbmOHc8MQYbsyYjG:Kg/eZeuGeuqDvyI2xE/EiG
- TLSH T1AF5833D1E1AC791DD8BA70B653770F5422ED8C1C97E2C58BA5A8333D48B7A91DB1038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ntm2616.apk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ntm2616.apk
Resource
android-34-x64-arm64-20260325.1-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ntm2616.apk
Resource
android-35-x64-arm64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ntm2616.apk
Resource
ubuntu2204-amd64-20260127-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ntm2616.apk
- Size 121.6MB
- SHA256 cf15642a46d5213fcce8c760017993c1cb280d8b5c973c09a923175b4e627d98
- MD5 5c9472ef94ca200d48dbbd92f29ff1df
- SHA1 2bc2f31bb1a3d66628648e18f55ed69280928957
- SHA512 09653d33ac4b07d075730addcdb3b5d01ec6ad91b8a676329338816554b2f332bb240ae6d6e45b87b3c54a39dbb40658399c112fc5e950aed711c6d4f6ce610c
- SSDEEP 3145728:W5gzTPeZJkuGeuqt/0OJMB4yI2xYbmOHc8MQYbsyYjG:Kg/eZeuGeuqDvyI2xE/EiG
- TLSH T1AF5833D1E1AC791DD8BA70B653770F5422ED8C1C97E2C58BA5A8333D48B7A91DB1038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Listens for changes in the sensor environment (might be used to detect emulation)