General
- Target ffb1ed3b567996567a76e5d640bfddcdea8c659addc3d656da05bf5350fecfac.apk
- Size 6.6MB
- Sample260819-lt6y5sec64
- SHA256 ffb1ed3b567996567a76e5d640bfddcdea8c659addc3d656da05bf5350fecfac
- MD5 be24e2a8afccca3c53df36a6fefef5fe
- SHA1 40bab7a4f8c910bf2383d95bdf32eec5ff6be8c5
- SHA512 79ecb404e34ab45f937143997b561cfbbaa8d57a1dc77b879cf0c99f0b3a9aaea5d6c57b14ac3cbf4e9853414d5cc245c8c33ef53c928e677236d740362855da
- SSDEEP 196608:Jr4lU2ceS9+PzW9giEAqlP40HTbZLJktjzDtx0:Ji3BbOgiVqlw0HnTmj9S
- TLSH T191662297A35958EECCFA567548B842205267DC314B97ABCB2C00723D2D7B2E99F58EC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ffb1ed3b567996567a76e5d640bfddcdea8c659addc3d656da05bf5350fecfac.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ffb1ed3b567996567a76e5d640bfddcdea8c659addc3d656da05bf5350fecfac.apk
- Size 6.6MB
- SHA256 ffb1ed3b567996567a76e5d640bfddcdea8c659addc3d656da05bf5350fecfac
- MD5 be24e2a8afccca3c53df36a6fefef5fe
- SHA1 40bab7a4f8c910bf2383d95bdf32eec5ff6be8c5
- SHA512 79ecb404e34ab45f937143997b561cfbbaa8d57a1dc77b879cf0c99f0b3a9aaea5d6c57b14ac3cbf4e9853414d5cc245c8c33ef53c928e677236d740362855da
- SSDEEP 196608:Jr4lU2ceS9+PzW9giEAqlP40HTbZLJktjzDtx0:Ji3BbOgiVqlw0HnTmj9S
- TLSH T191662297A35958EECCFA567548B842205267DC314B97ABCB2C00723D2D7B2E99F58EC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
4System Checks
4