General
- Target 83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5.apk
- Size 10.5MB
- Sample260817-ef76qatsay
- SHA256 83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5
- MD5 c3cbaa7af5eb9408f0d41bfc0c26b108
- SHA1 4c028067260f01a021afce988964ea0f3d586414
- SHA512 842b47b2d06e0d251cb4b2684bdd8217ce8323b4ae4c69ac07e034672a343b53a73bca354c37d6eac196e17c656dedad39a52a67e1ff86ba732fbc69c0f8c298
- SSDEEP 196608:B7fAr1+32EM8ki62klm/LPAN3ZG+2UNn0zchOnRIPM3vS0zU+CLZL4kk:B74rA22kvkLPANJGf60sMfSwjkk
- TLSH T192B62393E33DA49FDCF2D5328938C066052A5E608996A79F2E00B6685B739C53FC5FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
10 signatures
Behavioral task
behavioral1
Sample
83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5.apk
Resource
android-x86-arm-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5.apk
Resource
android-x64-20260325-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5.apk
Resource
android-x64-arm64-20260325-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5.apk
- Size 10.5MB
- SHA256 83683c5b32913fe9caacfc824f7db20e33921062d756029ccceaa240054f08f5
- MD5 c3cbaa7af5eb9408f0d41bfc0c26b108
- SHA1 4c028067260f01a021afce988964ea0f3d586414
- SHA512 842b47b2d06e0d251cb4b2684bdd8217ce8323b4ae4c69ac07e034672a343b53a73bca354c37d6eac196e17c656dedad39a52a67e1ff86ba732fbc69c0f8c298
- SSDEEP 196608:B7fAr1+32EM8ki62klm/LPAN3ZG+2UNn0zchOnRIPM3vS0zU+CLZL4kk:B74rA22kvkLPANJGf60sMfSwjkk
- TLSH T192B62393E33DA49FDCF2D5328938C066052A5E608996A79F2E00B6685B739C53FC5FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
1System Checks
1Tasks
static1
dropperloaderstealerotpbankerevasionantivmpersistencesmsc2suspicioustrojanexfiltrationobfuscated
Score
10/10
behavioral1
bankercollectiondefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
7/10
behavioral2
bankercollectiondefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral3
bankercollectiondefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10