General
- Target StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
- Size 54.6MB
- Sample260814-en4hhat1e1
- SHA256 c383442d399afbbfe6c1dd82e7ca1864ad9f4f9f73e04cc9474925bf018e0117
- MD5 8b74604a243c989a94e1ca18b4bce0b6
- SHA1 545ebb1b7a0c2b3a013a1d1c10117bcc6e5bf85b
- SHA512 8bd9f214e2e81dbb52ccab97733e7083ad87c4ac9fade25aa8d9cb1e6107d00026b42079416066d692919351d9a55b927a9f1b09adacc99f25a39faf24871f0c
- SSDEEP 1572864:szd+dsKPE6yIwx03EYXyvgJKjsU++C4NPbPQz+m0rG4Z:skd7HyIwx03EYqgWsoC4NPbc+mEGW
- TLSH T1AEC733438210F16AF95FA2304F6E4290F9239E7EDA3190F785D5B3C75AB7682EF54908
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
Resource
android-34-x64-arm64-20260325.1-en
Malware Config
Targets
-
- Target StudyTimeWithRain-v2-4-0-(Premium)-modyolo.apk
- Size 54.6MB
- SHA256 c383442d399afbbfe6c1dd82e7ca1864ad9f4f9f73e04cc9474925bf018e0117
- MD5 8b74604a243c989a94e1ca18b4bce0b6
- SHA1 545ebb1b7a0c2b3a013a1d1c10117bcc6e5bf85b
- SHA512 8bd9f214e2e81dbb52ccab97733e7083ad87c4ac9fade25aa8d9cb1e6107d00026b42079416066d692919351d9a55b927a9f1b09adacc99f25a39faf24871f0c
- SSDEEP 1572864:szd+dsKPE6yIwx03EYXyvgJKjsU++C4NPbPQz+m0rG4Z:skd7HyIwx03EYqgWsoC4NPbc+mEGW
- TLSH T1AEC733438210F16AF95FA2304F6E4290F9239E7EDA3190F785D5B3C75AB7682EF54908
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3