General
- Target b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
- Size 11.8MB
- Sample260820-nwbbcsda47
- SHA256 b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511
- MD5 9193f646d7470a0df8496bdf29fa8848
- SHA1 c4a0d212ac3d34daa4affe7c422e92f12c2eea3f
- SHA512 63c5f68b8722bf6b2a63cd5e9ad793ab490d7b75ff162d46d4f0e0b7ed79a62b26ca7f9ba3385482e6c67275850b3ee07b6619923ff2f6c6eed1d59de5d24214
- SSDEEP 196608:46yHFPs0u9beP2aNSDynXmnOIXzWzHliAIb6aqd0KWd5iJcyRtQkGEHjR:46ss0u9bePuyXmOIXzqFiwaRJQUkJ9
- TLSH T155C601ABFB1CF92BC4364032C55AA132B26F8F118E4297777908730865B35E94F65BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
- Size 11.8MB
- SHA256 b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511
- MD5 9193f646d7470a0df8496bdf29fa8848
- SHA1 c4a0d212ac3d34daa4affe7c422e92f12c2eea3f
- SHA512 63c5f68b8722bf6b2a63cd5e9ad793ab490d7b75ff162d46d4f0e0b7ed79a62b26ca7f9ba3385482e6c67275850b3ee07b6619923ff2f6c6eed1d59de5d24214
- SSDEEP 196608:46yHFPs0u9beP2aNSDynXmnOIXzWzHliAIb6aqd0KWd5iJcyRtQkGEHjR:46ss0u9bePuyXmOIXzqFiwaRJQUkJ9
- TLSH T155C601ABFB1CF92BC4364032C55AA132B26F8F118E4297777908730865B35E94F65BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2