General
- Target cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456.apk
- Size 10.6MB
- Sample260818-y85e3sbc44
- SHA256 cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456
- MD5 5ddd08e8723cde7af7a958d81b75fb07
- SHA1 5f610f9e8c5dbc969a859fd7354cdbf9260f82b6
- SHA512 a8468d43c03868fe6970ada691dd652b222eef5c392ad2db65bdc004e0dd502ee5da69444b6a2f7538220e0637334df5df64f798050c1a07c2f9832d95b6c5e2
- SSDEEP 196608:vH22U8FVnShA+1lqXNN9wykgH9OslZq/z2FfSFGGsZhHkorINbeFU/11d4O:+GAcT9RFmb2F6FGVZBBm
- TLSH T1B0B6125AF36DF41FD87F80324DBA933A558A8C15CA42AB172518B31CE9B7AE44F44BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456.apk
- Size 10.6MB
- SHA256 cda1b26ec2fce27a99ab0ce6467079805d4083a77785f4b409a85ba7c18fa456
- MD5 5ddd08e8723cde7af7a958d81b75fb07
- SHA1 5f610f9e8c5dbc969a859fd7354cdbf9260f82b6
- SHA512 a8468d43c03868fe6970ada691dd652b222eef5c392ad2db65bdc004e0dd502ee5da69444b6a2f7538220e0637334df5df64f798050c1a07c2f9832d95b6c5e2
- SSDEEP 196608:vH22U8FVnShA+1lqXNN9wykgH9OslZq/z2FfSFGGsZhHkorINbeFU/11d4O:+GAcT9RFmb2F6FGVZBBm
- TLSH T1B0B6125AF36DF41FD87F80324DBA933A558A8C15CA42AB172518B31CE9B7AE44F44BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Tasks
static1
spywareratexfiltrationpersistencedropperloader
Score
10/10
behavioral1
defense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionimpact
Score
8/10