General
- Target TTDK_8.0.2.apk
- Size 14.5MB
- Sample260813-ylkr6axdnb
- SHA256 e7ebac9ba2548db5e772f1a0d657acf0f61425e67cf326bea142a1f1c13a077d
- MD5 3ddd3fbe5efc0e0616df942baba2ab0f
- SHA1 10be043d07c93961b9d93723706ccab9b09347ba
- SHA512 bfdf438098bed0dc69a404f663c47d8608d0cc1c904aece0a6ea0afc079cb487c881c5ec265b2e127c9c53559a6fb8eab6eadd915d4174c8d20dd082007c2319
- SSDEEP 393216:uHevjjNLD5yEUEQrliBWkKB+psvJDKORmnia:usjpD5yEfQrlSuusBDKOcia
- TLSH T15DE6124BF748892BDCB610745E4A02317622ADD58B92A3C77910B7397EB72D44F39BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TTDK_8.0.2.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
redhook
C2
-
https://api.fxjmr.com
-
skt.fxjmr.com
Targets
-
- Target TTDK_8.0.2.apk
- Size 14.5MB
- SHA256 e7ebac9ba2548db5e772f1a0d657acf0f61425e67cf326bea142a1f1c13a077d
- MD5 3ddd3fbe5efc0e0616df942baba2ab0f
- SHA1 10be043d07c93961b9d93723706ccab9b09347ba
- SHA512 bfdf438098bed0dc69a404f663c47d8608d0cc1c904aece0a6ea0afc079cb487c881c5ec265b2e127c9c53559a6fb8eab6eadd915d4174c8d20dd082007c2319
- SSDEEP 393216:uHevjjNLD5yEUEQrliBWkKB+psvJDKORmnia:usjpD5yEfQrlSuusBDKOcia
- TLSH T15DE6124BF748892BDCB610745E4A02317622ADD58B92A3C77910B7397EB72D44F39BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)