Resubmissions

16/08/2026, 20:30

260816-zaa91swzft8

16/08/2026, 18:58

260816-xmxyfavzbz8

General

  • Target
    177716d41625e4e8446a7f858c2e345e35d1321cfd1297d579465eb245c810a7.zip
  • Size 3.6MB
  • Sample260816-zaa91swzft
  • SHA256 fbbe389b9b0ad18b4a0861a8e1c2673fe8c37d5a7ee20f137b1e283cd8ec3bb5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      177716d41625e4e8446a7f858c2e345e35d1321cfd1297d579465eb245c810a7.apk
    • Size 4.4MB
    • SHA256 177716d41625e4e8446a7f858c2e345e35d1321cfd1297d579465eb245c810a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Reads the content of the SMS messages.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v16

Tasks