General
- Target f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc.apk
- Size 18.0MB
- Sample260820-p5p2jsxelf
- SHA256 f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc
- MD5 95fc5c372f5f83d8777a6d5a54fac6b4
- SHA1 dba9a6e5a2fc8c770314a979fdbe200ce8df5c5c
- SHA512 321c2e4173209d38070639a5734a06423ac187be51252151a250dcb87c693557cf60da434202b5f47bad538f145c80fb5c5cf6c4e69040109f22a54471ce7116
- SSDEEP 393216:24r/LKoODEWDf4Cq2rFf8q5U8Td7D6P5V9ueaz/smnMT9LRmyPY5XeaD:24ruI8vq2rFfv/x7DQ5Mz4mWY15D
- TLSH T1FA173357E329A4AFCCF760768AB9422601574E558183BB936D14F22C28F7AC0EF59FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc.apk
- Size 18.0MB
- SHA256 f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc
- MD5 95fc5c372f5f83d8777a6d5a54fac6b4
- SHA1 dba9a6e5a2fc8c770314a979fdbe200ce8df5c5c
- SHA512 321c2e4173209d38070639a5734a06423ac187be51252151a250dcb87c693557cf60da434202b5f47bad538f145c80fb5c5cf6c4e69040109f22a54471ce7116
- SSDEEP 393216:24r/LKoODEWDf4Cq2rFf8q5U8Td7D6P5V9ueaz/smnMT9LRmyPY5XeaD:24ruI8vq2rFfv/x7DQ5Mz4mWY15D
- TLSH T1FA173357E329A4AFCCF760768AB9422601574E558183BB936D14F22C28F7AC0EF59FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Reads information about phone network operator.
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
1System Checks
1Tasks
static1
dropperloaderevasionantivmpersistencestealerotpbankerobfuscated
Score
10/10
behavioral1
googledefense_evasiondiscoveryevasionexecutionpersistencephishing
Score
10/10
behavioral2
googledefense_evasiondiscoveryevasionexecutionpersistencephishing
Score
10/10
behavioral3
googledefense_evasiondiscoveryevasionexecutionpersistencephishing
Score
10/10