General
- Target app3175918-yl1ot6.apk
- Size 28.0MB
- Sample260817-vt57aaep3w
- SHA256 c6a63b5fad68429496527a077e664e2e5cdb2d07e9c630f6373a938613a3de4d
- MD5 320052bdfeef7d90b9a42dc092e750bd
- SHA1 1f9578243b63d8b3d8413be39b1d98c196b97bc4
- SHA512 0b59cfd3192e2daf55af0f8d28dc31e3defeaae20dcdcc0502e9b286ff39d35d860d78de2a133d1e16cdd6eec2a3367a46a0ce3aca902bd8effd890b4974ef9f
- SSDEEP 786432:gay/C7f3FqF7IFkACGkBNMTL5tbwrLXS2tqhENTrfJKD:1nFtFk1NI5FwrLimJNTry
- TLSH T1E55722D7F3645E2EC4770172489E533A2A654E25CB43A74B2A48372D7CB32E40F49BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app3175918-yl1ot6.apk
Resource
android-x64-arm64-20260325-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target app3175918-yl1ot6.apk
- Size 28.0MB
- SHA256 c6a63b5fad68429496527a077e664e2e5cdb2d07e9c630f6373a938613a3de4d
- MD5 320052bdfeef7d90b9a42dc092e750bd
- SHA1 1f9578243b63d8b3d8413be39b1d98c196b97bc4
- SHA512 0b59cfd3192e2daf55af0f8d28dc31e3defeaae20dcdcc0502e9b286ff39d35d860d78de2a133d1e16cdd6eec2a3367a46a0ce3aca902bd8effd890b4974ef9f
- SSDEEP 786432:gay/C7f3FqF7IFkACGkBNMTL5tbwrLXS2tqhENTrfJKD:1nFtFk1NI5FwrLimJNTry
- TLSH T1E55722D7F3645E2EC4770172489E533A2A654E25CB43A74B2A48372D7CB32E40F49BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.