General
- Target newpay_xpay_20260817_官网v2(1).apk
- Size 38.9MB
- Sample260818-s5w2msvfma
- SHA256 08b83540051ce6a48c1ea5e2827fbf2f5c03de33540d0c7a0e629051a9124db9
- MD5 53b5288006ded0704ce99047c014ae8e
- SHA1 6b86d60a7f3f52db7131ebe403c668465b6584dd
- SHA512 6cf409df69379f6f7c2654603fa283617942ba5f0ed57f793451261a22f3ba43da94bef545a248ecef9b6ea64bd2aab487e143d4cc00dfa44c08da98c29e66c0
- SSDEEP 786432:U8NJXsiK63rk5wPjrm/FvZ+P+KAC09zc+BJNTM92WC39O/98k3h/ltJB:XJXAsjr8GdYfNgkhaOkLB
- TLSH T150973396EBACCC1EC8374433592E127056690E29C683E75B29EC776D68739D80ED4BF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
newpay_xpay_20260817_官网v2(1).apk
Resource
android-35-x64-arm64-20260325-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target newpay_xpay_20260817_官网v2(1).apk
- Size 38.9MB
- SHA256 08b83540051ce6a48c1ea5e2827fbf2f5c03de33540d0c7a0e629051a9124db9
- MD5 53b5288006ded0704ce99047c014ae8e
- SHA1 6b86d60a7f3f52db7131ebe403c668465b6584dd
- SHA512 6cf409df69379f6f7c2654603fa283617942ba5f0ed57f793451261a22f3ba43da94bef545a248ecef9b6ea64bd2aab487e143d4cc00dfa44c08da98c29e66c0
- SSDEEP 786432:U8NJXsiK63rk5wPjrm/FvZ+P+KAC09zc+BJNTM92WC39O/98k3h/ltJB:XJXAsjr8GdYfNgkhaOkLB
- TLSH T150973396EBACCC1EC8374433592E127056690E29C683E75B29EC776D68739D80ED4BF0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger