General
- Target fallen.apk
- Size 914KB
- Sample260815-c5ejladd92
- SHA256 86fa3c437139d983ea4be163c641e2baf80dae9fb1e7b36c87bdd907eabce598
- MD5 bc160713eaceb509c7bbdd9ab1a42bd0
- SHA1 b702826a797961846e3d73ba5ca928d144c90e5b
- SHA512 efe28fe2332f9bcc6dc255cb05d5ea854b07c5f749bdae422512253583b537ecc8fc2391ee59cc34717693233303323cf5b92638c812d4e277135f5c0c4a15a4
- SSDEEP 24576:LbEgXsxOeN0rICULwzP6V8D5iIIdCBGOS0TeleTZMqYPyNDXIWl/5vIf:fEgXs5NAZP/iJc5S9eTZM3KXIk/F6
- TLSH T18015338894FAC506FE31C4B6F5AF2B5FD389A1C0A31036BAED2F17E14887509A5C55E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fallen.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target fallen.apk
- Size 914KB
- SHA256 86fa3c437139d983ea4be163c641e2baf80dae9fb1e7b36c87bdd907eabce598
- MD5 bc160713eaceb509c7bbdd9ab1a42bd0
- SHA1 b702826a797961846e3d73ba5ca928d144c90e5b
- SHA512 efe28fe2332f9bcc6dc255cb05d5ea854b07c5f749bdae422512253583b537ecc8fc2391ee59cc34717693233303323cf5b92638c812d4e277135f5c0c4a15a4
- SSDEEP 24576:LbEgXsxOeN0rICULwzP6V8D5iIIdCBGOS0TeleTZMqYPyNDXIWl/5vIf:fEgXs5NAZP/iJc5S9eTZM3KXIk/F6
- TLSH T18015338894FAC506FE31C4B6F5AF2B5FD389A1C0A31036BAED2F17E14887509A5C55E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).