General
- Target CleverType AI Keyboard_v8_10_3.apk
- Size 33.8MB
- Sample260818-mpke1sgf67
- SHA256 e21142167d819db6c2fa765e5b3231fe1b3a418963c0b92201b15c2e31279098
- MD5 1c1c32d7ea3152bb61af26a1f0915b10
- SHA1 7f0d3e58262e52808397334e44b4fd55012e47ed
- SHA512 3b554f761e62acfa954b3c6286feb00ede8cedf9bf61b36e98df62b461924c99c9e4bc90a49e4c591751dcd1abfc39effd8ea2dc5e38c2daafdd76b0defbafb0
- SSDEEP 786432:eepp9KZZvmuzldbNp4lID7bwlAXsfnIPc6/j8i1jo:eeUZUuzjbN2cbwTP6/j8Ojo
- TLSH T11B7701CA66E8DF25CC720036455D7B365B690E655643E3C3A80C73493DBBAF80E1A6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
CleverType AI Keyboard_v8_10_3.apk
Resource
android-35-x64-arm64-20260325-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target CleverType AI Keyboard_v8_10_3.apk
- Size 33.8MB
- SHA256 e21142167d819db6c2fa765e5b3231fe1b3a418963c0b92201b15c2e31279098
- MD5 1c1c32d7ea3152bb61af26a1f0915b10
- SHA1 7f0d3e58262e52808397334e44b4fd55012e47ed
- SHA512 3b554f761e62acfa954b3c6286feb00ede8cedf9bf61b36e98df62b461924c99c9e4bc90a49e4c591751dcd1abfc39effd8ea2dc5e38c2daafdd76b0defbafb0
- SSDEEP 786432:eepp9KZZvmuzldbNp4lID7bwlAXsfnIPc6/j8i1jo:eeUZUuzjbN2cbwTP6/j8Ojo
- TLSH T11B7701CA66E8DF25CC720036455D7B365B690E655643E3C3A80C73493DBBAF80E1A6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation)