65ad1323b1abb48fad3fb37b147d7cbc5ab1bebcd04006538f8c0ab5e5e49833 | Triage™

Login
Reports

Overview

overview

7

Static

static

6

phantom-game.apk

android-9-x86

7

phantom-game.apk

android-10-x64

7

phantom-game.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
phantom-game.apk
Size 121KB
Sample260821-lnmnbaxdkh
SHA256 65ad1323b1abb48fad3fb37b147d7cbc5ab1bebcd04006538f8c0ab5e5e49833
MD5 aa10ce73078b449424e135d62a047982
SHA1 fa3a9dfea4ffabacf561a398d5e7ef709cf587f4
SHA512 b4ad4156fd26c1a200aa1d978e92945fabe3ed3286ecda4bf80cffd0b1d213055670643c0439ef331c780719e5839e28a89b03789f686b591057ddd5d15af7a7
SSDEEP 1536:s8MQVOCl5PuUl1jYkZLPSjli+2QYbT67+akgsjJk:s5Qh53fLPKi7TMkgC2
TLSH
T1FBC35D83B7239C3ECEB391711D6943256277AA23C953730BB9A40B2C64E76C95F18BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android collection credential_access defense_evasion

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

phantom-game.apk

Resource

android-x86-arm-20260325-en

android-9-x86

2 signatures

150 seconds

collection credential_access defense_evasion

Behavioral task

behavioral2

Sample

phantom-game.apk

Resource

android-x64-20260325-en

android-10-x64

2 signatures

150 seconds

collection credential_access defense_evasion

Behavioral task

behavioral3

Sample

phantom-game.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

2 signatures

150 seconds

collection credential_access defense_evasion

Malware Config

Targets

- Target
  phantom-game.apk
- Size 121KB
- SHA256 65ad1323b1abb48fad3fb37b147d7cbc5ab1bebcd04006538f8c0ab5e5e49833
- MD5 aa10ce73078b449424e135d62a047982
- SHA1 fa3a9dfea4ffabacf561a398d5e7ef709cf587f4
- SHA512 b4ad4156fd26c1a200aa1d978e92945fabe3ed3286ecda4bf80cffd0b1d213055670643c0439ef331c780719e5839e28a89b03789f686b591057ddd5d15af7a7
- SSDEEP 1536:s8MQVOCl5PuUl1jYkZLPSjli+2QYbT67+akgsjJk:s5Qh53fLPKi7TMkgC2
- TLSH
  T1FBC35D83B7239C3ECEB391711D6943256277AA23C953730BB9A40B2C64E76C95F18BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

Credential Access

Input Capture

GUI Input Capture

Keylogging

Discovery

Lateral Movement

Collection

Input Capture

GUI Input Capture

Keylogging

Screen Capture

Command and Control

Exfiltration

Impact

Input Injection

Tasks

static1

behavioral1

collectioncredential_accessdefense_evasion

behavioral2

collectioncredential_accessdefense_evasion

behavioral3

collectioncredential_accessdefense_evasion

© 2018-2026

Terms | Privacy