General
- Target ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088.apk
- Size 2.6MB
- Sample260818-xdmfcaydlg
- SHA256 ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088
- MD5 275f0b929a0330e22a61d2bce47676cd
- SHA1 881dea7a13ca1204db96e393f3719480abbd8226
- SHA512 4e9325e8704b110b4dedd676d19f966bcc8f2e667373d6671393994a257061808b2e50514e77eb8b7f1d7ef3936f8135b7b1d12503125dcf4caaa2a388a3f7ce
- SSDEEP 49152:H/uz+Po3fCFwPF75hnDpeU7bzp81IUR+HABasBYkQiV+bMXyb2snp6M:f4EovCAnQU7bzp81IUR+ggpkQfbMXybL
- TLSH T1B9C52253F262A95BD9F3C3322171273550379D26CB43FB8A2C4877B928B7AD84B906D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088.apk
- Size 2.6MB
- SHA256 ba0313f06698bae058969c58a88ebba55e9439a103b0e265509ff4b59d6b8088
- MD5 275f0b929a0330e22a61d2bce47676cd
- SHA1 881dea7a13ca1204db96e393f3719480abbd8226
- SHA512 4e9325e8704b110b4dedd676d19f966bcc8f2e667373d6671393994a257061808b2e50514e77eb8b7f1d7ef3936f8135b7b1d12503125dcf4caaa2a388a3f7ce
- SSDEEP 49152:H/uz+Po3fCFwPF75hnDpeU7bzp81IUR+HABasBYkQiV+bMXyb2snp6M:f4EovCAnQU7bzp81IUR+ggpkQfbMXybL
- TLSH T1B9C52253F262A95BD9F3C3322171273550379D26CB43FB8A2C4877B928B7AD84B906D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2