General
- Target b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284.apk
- Size 10.1MB
- Sample260818-w129msztfv
- SHA256 b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284
- MD5 b12e62dc2c8d4b6d0a1f1c8ce443b2a8
- SHA1 1e670ff57b87a2b086e7fbdd491775c8f3956b7b
- SHA512 0ff68c7243aa8cb119a7acc73a5428a04d5951327190c5e76c6ee1ec399696a884d5acba53faa4c829df9106690f352fcfd3930f251f7c8d520d78dee1e011aa
- SSDEEP 196608:1fAr1McOHJoFjEFpGJlgcMKKKKKgjyDhdzZSmiu3iG/TD8p6TUWL/VXluEa/eILO:14reHEjoYPgcNfzZSi7D8pAL/BkreILO
- TLSH T178B61246F369AF2EC87380338AEA5736454A4C178A43E7536919731C78B7AF44F85BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284.apk
Resource
android-x64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284.apk
- Size 10.1MB
- SHA256 b65649f6856ecdd92f05b02d049c6f04aa75cf00d0c462ed5c8a1db49a756284
- MD5 b12e62dc2c8d4b6d0a1f1c8ce443b2a8
- SHA1 1e670ff57b87a2b086e7fbdd491775c8f3956b7b
- SHA512 0ff68c7243aa8cb119a7acc73a5428a04d5951327190c5e76c6ee1ec399696a884d5acba53faa4c829df9106690f352fcfd3930f251f7c8d520d78dee1e011aa
- SSDEEP 196608:1fAr1McOHJoFjEFpGJlgcMKKKKKgjyDhdzZSmiu3iG/TD8p6TUWL/VXluEa/eILO:14reHEjoYPgcNfzZSi7D8pAL/BkreILO
- TLSH T178B61246F369AF2EC87380338AEA5736454A4C178A43E7536919731C78B7AF44F85BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
dropperloaderevasionantivmspywareratexfiltrationpersistence
Score
10/10
behavioral1
defense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionimpact
Score
8/10