General
- Target cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa.apk
- Size 10.7MB
- Sample260820-pdjqfswfld
- SHA256 cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa
- MD5 30751570c38db542435ca911744fa15b
- SHA1 c6bc827d698785c1b9d816fbaaa83eadf30da4ae
- SHA512 15618d1a1e97ced9202c35a63f684be74d8e0d0e0697bd8fd1ac80b627ba95e9baa0f6a30e3d1d06abde11fd93645980e33a9fb6b90d6bad6458308be27b7fc3
- SSDEEP 196608:aNJy7ZEk2zmPJgkAdnmOWNrIGWdIqv1KqU1DrIk0i7/7NonWkTQ:aNkn2KPJgTnAhOxnGIk0i7anWT
- TLSH T184B6029AFF1CF86BD87E0572CA6AD12332679E054A425737350CB2086A334D96F85FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa.apk
- Size 10.7MB
- SHA256 cefba3a5a6be2d9238b17f1f776507e2a5b109b6add59f7e55ef626288e867fa
- MD5 30751570c38db542435ca911744fa15b
- SHA1 c6bc827d698785c1b9d816fbaaa83eadf30da4ae
- SHA512 15618d1a1e97ced9202c35a63f684be74d8e0d0e0697bd8fd1ac80b627ba95e9baa0f6a30e3d1d06abde11fd93645980e33a9fb6b90d6bad6458308be27b7fc3
- SSDEEP 196608:aNJy7ZEk2zmPJgkAdnmOWNrIGWdIqv1KqU1DrIk0i7/7NonWkTQ:aNkn2KPJgTnAhOxnGIk0i7anWT
- TLSH T184B6029AFF1CF86BD87E0572CA6AD12332679E054A425737350CB2086A334D96F85FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Tasks
static1
masqueradingsuspiciousstealerotpbankerpersistencedropperloaderevasionantivmsmstrojanexfiltration
Score
10/10
behavioral1
defense_evasiondiscoveryexecutionpersistence
Score
8/10
behavioral2
defense_evasiondiscoveryexecutionpersistence
Score
8/10
behavioral3
defense_evasiondiscoveryevasionexecutionpersistence
Score
8/10