General
- Target eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
- Size 10.6MB
- Sample260819-cbg3mack2s
- SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
- MD5 1e288142a45ebe7244ab899798cea643
- SHA1 078295d1cda8319ed69f64b5443e4d89705d8523
- SHA512 0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
- SSDEEP 196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
- TLSH T155B612A3F768599DC8F69371487A5631557BCD208743A78B2808B739787B7E48F88BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
- Size 10.6MB
- SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
- MD5 1e288142a45ebe7244ab899798cea643
- SHA1 078295d1cda8319ed69f64b5443e4d89705d8523
- SHA512 0509d443761eb56aa9f53ca552f06ea1202917fa5daf8b0475da247b031677d363ad95e381065a09939bc2681aaf77abf82869c3d0256afea55f3d145e056d7b
- SSDEEP 196608:+Ubrdcg+Cnp2yJqiHLu5OOERwQDAvpilOV8YJ/ywk3muPFoeDb7uYoeDzGOjCx:+UbJcg++p2yJ5Ligw0CswBCmuP2eLuvn
- TLSH T155B612A3F768599DC8F69371487A5631557BCD208743A78B2808B739787B7E48F88BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Tasks
static1
c2suspiciousspywareratexfiltrationevasionantivm
Score
10/10
behavioral1
defense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionimpact
Score
8/10