General
- Target BG_MPanel_3.25.1_sign.apk
- Size 268.0MB
- Sample260815-pkr1eawdpf
- SHA256 c0b4c5a031f7496b1b423d415d6c0943dd32ff397cb56e360d79f4d2c724fa02
- MD5 96bf40c05495582dcaee2799df50ef71
- SHA1 3c5a25582c0e25d85f72e97bc8e43044382ef563
- SHA512 8419493473ef95b027708f90be21fefbfeadf92b1002c5ec52c984b08f905619e7418e61323c5d8c93cb8dd122546b141c3154f6af47c7d922d6466c21afa4c9
- SSDEEP 6291456:TPVQr4ntdZMU+c/XdIxd6fSwNh49PTBogcazcTaTKDa6x/6Erg4N:TdaetdZMhuXdIb6fS7UazcIKe6QErgk
- TLSH T14CD83367E3EC5425E8772A31984E3933E6197E24E610E7EE7418361E1DF3AD04B06BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
BG_MPanel_3.25.1_sign.apk
Resource
android-35-x64-arm64-20260325-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target BG_MPanel_3.25.1_sign.apk
- Size 268.0MB
- SHA256 c0b4c5a031f7496b1b423d415d6c0943dd32ff397cb56e360d79f4d2c724fa02
- MD5 96bf40c05495582dcaee2799df50ef71
- SHA1 3c5a25582c0e25d85f72e97bc8e43044382ef563
- SHA512 8419493473ef95b027708f90be21fefbfeadf92b1002c5ec52c984b08f905619e7418e61323c5d8c93cb8dd122546b141c3154f6af47c7d922d6466c21afa4c9
- SSDEEP 6291456:TPVQr4ntdZMU+c/XdIxd6fSwNh49PTBogcazcTaTKDa6x/6Erg4N:TdaetdZMhuXdIb6fS7UazcIKe6QErgk
- TLSH T14CD83367E3EC5425E8772A31984E3933E6197E24E610E7EE7418361E1DF3AD04B06BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)