General
- Target smart_3.0.apk
- Size 1.5MB
- Sample260815-m67xmsvbqa
- SHA256 4395f1d6ba0ae4c512630ecaf367593a6f14c81cb1589173a1c2b8262a474b1c
- MD5 8b509d59a5448fb32e8a5680aa29b141
- SHA1 12fb01a8d7f16878a9cae500563de5b8c5dfdf9b
- SHA512 d7befa76d4d6da25961ff953e4af707dc57ef4d8ab70acc1197761aab210efa2fa0bc684da72ce8907c8e9915bf261e31c652d0a5044d6934c21894ce09cc0b7
- SSDEEP 24576:dBEO5TEy9yuJ4qKr2Ir5RQ4zr2Lp6PCUxBqqtYaRyiDuBg2AJfW:dW+h9y1qQ5/zSLyqqthRFDuBg2As
- TLSH T1B975E086F3D8AC2FCDB785320BB60B6E41564C4ACA46D71786B4B12C9D7B9C05E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
smart_3.0.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
smart_3.0.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
smart_3.0.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
smart_3.0.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
smart_3.0.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
smart_3.0.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target smart_3.0.apk
- Size 1.5MB
- SHA256 4395f1d6ba0ae4c512630ecaf367593a6f14c81cb1589173a1c2b8262a474b1c
- MD5 8b509d59a5448fb32e8a5680aa29b141
- SHA1 12fb01a8d7f16878a9cae500563de5b8c5dfdf9b
- SHA512 d7befa76d4d6da25961ff953e4af707dc57ef4d8ab70acc1197761aab210efa2fa0bc684da72ce8907c8e9915bf261e31c652d0a5044d6934c21894ce09cc0b7
- SSDEEP 24576:dBEO5TEy9yuJ4qKr2Ir5RQ4zr2Lp6PCUxBqqtYaRyiDuBg2AJfW:dW+h9y1qQ5/zSLyqqthRFDuBg2As
- TLSH T1B975E086F3D8AC2FCDB785320BB60B6E41564C4ACA46D71786B4B12C9D7B9C05E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
1System Checks
1