General
- Target bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
- Size 5.8MB
- Sample260818-x2afpayfkc
- SHA256 bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f
- MD5 ce82104e5902a2250feee4e83d58b800
- SHA1 429c118c6a1e2631dad7e534a86cffdcc00fe6d3
- SHA512 57277ab2ea5f04eb84909c26a217fd852cceec4487fd062a2341c2111bc7d0b5a1e66bed1cfc6d973afea25bf992ccd95c2006bd6a3a0ee4d2a88ceadad9b077
- SSDEEP 98304:rni1LrufukyrG06/VYMFtLyQxDmoRuSYpIz5B5blN3W0+n0eGEovCtgvQ:AS0G06qM3BSoQShzxlNG0+0BEz2vQ
- TLSH T1F756019BF368EE2FC537C0324A690232450B4D15AA43E7176919B31D69B3ED48F86FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
- Size 5.8MB
- SHA256 bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f
- MD5 ce82104e5902a2250feee4e83d58b800
- SHA1 429c118c6a1e2631dad7e534a86cffdcc00fe6d3
- SHA512 57277ab2ea5f04eb84909c26a217fd852cceec4487fd062a2341c2111bc7d0b5a1e66bed1cfc6d973afea25bf992ccd95c2006bd6a3a0ee4d2a88ceadad9b077
- SSDEEP 98304:rni1LrufukyrG06/VYMFtLyQxDmoRuSYpIz5B5blN3W0+n0eGEovCtgvQ:AS0G06qM3BSoQShzxlNG0+0BEz2vQ
- TLSH T1F756019BF368EE2FC537C0324A690232450B4D15AA43E7176919B31D69B3ED48F86FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
dropperloaderpersistenceevasionantivm
Score
10/10
behavioral1
defense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionimpact
Score
8/10