General
- Target 252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
- Size 26.3MB
- Sample260813-bdd83sydnd
- SHA256 252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492
- MD5 31b1a17fee6413ad28322183344b786e
- SHA1 b350b9dedc9101cfb7db97d61bc187d3ab2ac707
- SHA512 6130a5ed8e4c1ee443bdac1026e417d4eb0e6864bc80b87011283b3ea4d7da1d4d7cd7c7727c236c5d6712a700fdb34dfacdc92c5d5c1241d21e2f52ae8306bc
- SSDEEP 786432:3BeFmZWuTzFC9SAnRssEr/+/iNX2RQ9PLKvRv9L:3sFmZ5k9ZRdEL+/sIL
- TLSH T1015733A7E3A928AEDCB664714A7E403251278C3483A7B79F1C88B2356C776E5CF447C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
- Size 26.3MB
- SHA256 252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492
- MD5 31b1a17fee6413ad28322183344b786e
- SHA1 b350b9dedc9101cfb7db97d61bc187d3ab2ac707
- SHA512 6130a5ed8e4c1ee443bdac1026e417d4eb0e6864bc80b87011283b3ea4d7da1d4d7cd7c7727c236c5d6712a700fdb34dfacdc92c5d5c1241d21e2f52ae8306bc
- SSDEEP 786432:3BeFmZWuTzFC9SAnRssEr/+/iNX2RQ9PLKvRv9L:3sFmZ5k9ZRdEL+/sIL
- TLSH T1015733A7E3A928AEDCB664714A7E403251278C3483A7B79F1C88B2356C776E5CF447C4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Tasks
static1
bankertrojanoverlayc2suspiciousevasionantivmratspywareexfiltrationpersistence
Score
10/10
behavioral1
defense_evasiondiscoveryimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryimpact
Score
8/10