General
- Target 0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20.apk
- Size 10.6MB
- Sample260812-22c9ssfp3s
- SHA256 0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20
- MD5 6bd15e11fff0a42753f222f93deb880f
- SHA1 0cd3712ead1702feb3c55d0b22487ff8214afc28
- SHA512 04944958865ace3e8363edf3db93248502933a2793c30c1c0fd004087ce1a1d1a10b181641d4c8ee8958e3c53952ff1f3dff935551939452c21192f1a02502f7
- SSDEEP 196608:VNBCMYf6B61BmkI37SjwW2+5/BV+xoHDX203gR2BamUl:VNEMDgba7N+HVgyDX203zBapl
- TLSH T1F7B61257D338289FE8B519704A7BB16246964F4449C2DBAF6E74B92C1BB38C13B08FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
8 signatures
Behavioral task
behavioral1
Sample
0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20.apk
- Size 10.6MB
- SHA256 0991fe1036287059932824cfee9113d2a4ca7f139814adf23eba1e336eacbd20
- MD5 6bd15e11fff0a42753f222f93deb880f
- SHA1 0cd3712ead1702feb3c55d0b22487ff8214afc28
- SHA512 04944958865ace3e8363edf3db93248502933a2793c30c1c0fd004087ce1a1d1a10b181641d4c8ee8958e3c53952ff1f3dff935551939452c21192f1a02502f7
- SSDEEP 196608:VNBCMYf6B61BmkI37SjwW2+5/BV+xoHDX203gR2BamUl:VNEMDgba7N+HVgyDX203zBapl
- TLSH T1F7B61257D338289FE8B519704A7BB16246964F4449C2DBAF6E74B92C1BB38C13B08FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
dropperloaderevasionantivmsmstrojanexfiltrationobfuscatedpersistence
Score
10/10
behavioral1
defense_evasiondiscoverypersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryimpact
Score
8/10