General
- Target f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03.apk
- Size 27.3MB
- Sample260819-as1j7avydv
- SHA256 f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03
- MD5 9a95519beab8d554735fc2f6389d3f65
- SHA1 2177803bba57c1850fbf571423cb6d42d4e83ccb
- SHA512 86c500964ca7757620e4e1f5446d369c8df69636e64fe6790989b96b531325e6658414399657f52b52222ff69846341e9b9e43d80f05ffd2c31cb78fcda1c4d6
- SSDEEP 393216:Hj4AU+w9R5JMFg/ZqEpkvMAs3wgEgW5yX0O+HA8+55mScNFSizG1s/lfaVBk:HMz+m/J6s0j0AsAgEFMGScXzAsdfaVC
- TLSH T164572253E768ED9FC0F64331897A022774678E2257439AA77A2C76382FB31C58F05AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03.apk
Resource
android-x64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03.apk
Resource
android-x64-arm64-20260325-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03.apk
- Size 27.3MB
- SHA256 f70fff6d62ce1443efe862a8edfebb2529eeb66891633fa68a6b504f8d2f3a03
- MD5 9a95519beab8d554735fc2f6389d3f65
- SHA1 2177803bba57c1850fbf571423cb6d42d4e83ccb
- SHA512 86c500964ca7757620e4e1f5446d369c8df69636e64fe6790989b96b531325e6658414399657f52b52222ff69846341e9b9e43d80f05ffd2c31cb78fcda1c4d6
- SSDEEP 393216:Hj4AU+w9R5JMFg/ZqEpkvMAs3wgEgW5yX0O+HA8+55mScNFSizG1s/lfaVBk:HMz+m/J6s0j0AsAgEFMGScXzAsdfaVC
- TLSH T164572253E768ED9FC0F64331897A022774678E2257439AA77A2C76382FB31C58F05AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
dropperloaderstealerotpbankerevasionantivmspywareratexfiltrationobfuscatedpersistence
Score
10/10
behavioral1
defense_evasiondiscoveryimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionimpact
Score
8/10