General
- Target app.apk
- Size 15.6MB
- Sample260814-am2v3a1tey
- SHA256 13512f4011c2a0331a07ed1eff895e27027c8d0742808e8ca651a506743fae94
- MD5 0d1520422dff8184c2eb24a164337d29
- SHA1 7c79b6675a687e84fb3426e074a1cc82c91f220b
- SHA512 993a5ecf3e62cb41cfc3df7b6fb21e49645adefdabb48bbd0a78cd5146ea2a44dc00bd4bb81ac26fa29459da16d07082ce40fa9e07b6abd8b430298ccad8b5cf
- SSDEEP 393216:6MnrVh6aS8NMKlH3Y+AygrDIOMLSo4PVeEWAmGpO6jCLOS:6Mrz6dWMKlH3YpIMFe1C+
- TLSH T178F623D9338A866DED33E97319CB4438AC4F4D204D84575BA50AB36E21773C70E8E9AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target app.apk
- Size 15.6MB
- SHA256 13512f4011c2a0331a07ed1eff895e27027c8d0742808e8ca651a506743fae94
- MD5 0d1520422dff8184c2eb24a164337d29
- SHA1 7c79b6675a687e84fb3426e074a1cc82c91f220b
- SHA512 993a5ecf3e62cb41cfc3df7b6fb21e49645adefdabb48bbd0a78cd5146ea2a44dc00bd4bb81ac26fa29459da16d07082ce40fa9e07b6abd8b430298ccad8b5cf
- SSDEEP 393216:6MnrVh6aS8NMKlH3Y+AygrDIOMLSo4PVeEWAmGpO6jCLOS:6Mrz6dWMKlH3YpIMFe1C+
- TLSH T178F623D9338A866DED33E97319CB4438AC4F4D204D84575BA50AB36E21773C70E8E9AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Android FlyingEagle payload
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Declares services with permission to bind to the system
Queries the mobile country code (MCC)
Requests dangerous framework permissions