General
- Target 422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600.apk
- Size 24.0MB
- Sample260816-2px4fayxft
- SHA256 422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600
- MD5 453a887c5f740ac61b2e9062fc629eef
- SHA1 6af43da22bc48eecd534230341633040b7e299df
- SHA512 cee15452928b59ac96b64ccd34f1862f996d05f0d8aefca4538fa2610038ea95cfe0c46e09d24f541568ee002524ebf7348d90da85b995805e0f5747adc119cf
- SSDEEP 393216:pzYvSrVv7BGv8RDLlgXlc3GTVen1Fv6H5XgIQgb/kinb5mVUenK1LMrpAPYlVXdf:pl97BG9W2TVe1FvHgzsNKSpUYrXgogZA
- TLSH T1454712C7F7E8D95AC4F24372C47A52B7605B4E144B039AA71B58B33C29B39E06E85BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600.apk
Resource
android-x86-arm-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600.apk
Resource
android-33-x64-arm64-20260708-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600.apk
- Size 24.0MB
- SHA256 422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600
- MD5 453a887c5f740ac61b2e9062fc629eef
- SHA1 6af43da22bc48eecd534230341633040b7e299df
- SHA512 cee15452928b59ac96b64ccd34f1862f996d05f0d8aefca4538fa2610038ea95cfe0c46e09d24f541568ee002524ebf7348d90da85b995805e0f5747adc119cf
- SSDEEP 393216:pzYvSrVv7BGv8RDLlgXlc3GTVen1Fv6H5XgIQgb/kinb5mVUenK1LMrpAPYlVXdf:pl97BG9W2TVe1FvHgzsNKSpUYrXgogZA
- TLSH T1454712C7F7E8D95AC4F24372C47A52B7605B4E144B039AA71B58B33C29B39E06E85BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2