General
- Target Android Monitor.apk
- Size 6.5MB
- Sample260810-xtsbja1vgv
- SHA256 ca9fa432ec1e4abac1983c2faf59da727997331676fbe9b4354de826968a32b3
- MD5 d0008e8a77b3348f16bd40ac1172170d
- SHA1 850d7c8908fab96d1c98bf81ac3f3514ba826dd7
- SHA512 e5c38e41cca5d076fafb13ae8a6c20ed3a24e8da548e17819496c1c73f1592b80fec37480b373317e8411b10b9506ffbc4795b139dda82fa9084c5d2db67db0b
- SSDEEP 98304:JgnWs4LNZvLPxYus1z/8EgGwnLmpftoIQ0nHoUZ1+W38UQqpgydG7Y9FDxz3EaGG:uWTLRloIEImpqI1HoSV8xa9T9Z
- TLSH T1406633B3978CA92EDCF7533056212803FA3A9A48861B758B3DE477641B7362D2D5E3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Android Monitor.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
Android Monitor.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Android Monitor.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
Android Monitor.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Android Monitor.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Android Monitor.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target Android Monitor.apk
- Size 6.5MB
- SHA256 ca9fa432ec1e4abac1983c2faf59da727997331676fbe9b4354de826968a32b3
- MD5 d0008e8a77b3348f16bd40ac1172170d
- SHA1 850d7c8908fab96d1c98bf81ac3f3514ba826dd7
- SHA512 e5c38e41cca5d076fafb13ae8a6c20ed3a24e8da548e17819496c1c73f1592b80fec37480b373317e8411b10b9506ffbc4795b139dda82fa9084c5d2db67db0b
- SSDEEP 98304:JgnWs4LNZvLPxYus1z/8EgGwnLmpftoIQ0nHoUZ1+W38UQqpgydG7Y9FDxz3EaGG:uWTLRloIEImpqI1HoSV8xa9T9Z
- TLSH T1406633B3978CA92EDCF7533056212803FA3A9A48861B758B3DE477641B7362D2D5E3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Checks the presence of a debugger