General
- Target zest.voyager.falcon.apk
- Size 5.8MB
- Sample260822-1tfvaazdkd
- SHA256 c55d0672880e00cc69777be9836ce9cabcda783f080b29cf912b0d1f6f587837
- MD5 e20ce633db159ecdd19f40f4f1305e83
- SHA1 4658d681862ee8a4e05601f9f3806569f201d5f5
- SHA512 293ffe9f9b98eda8acfa9c55c81ecff4e549a2da659e6003e2de589f1267e3f82ae5b0f5660ce3785d184828b7cab65e33c43a6ab038c0a8a276f962b1d7a951
- SSDEEP 98304:8f/S2XSGrO3TCqmury6lfESGY08gtIlZo/KrrCGE8ayWS:QS8S1TCqzrZEXYoUqbS
- TLSH T14356E08BFB44A96AC0F753B64536532245474D268B83D7835E58723C28BB6D07F8EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
zest.voyager.falcon.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
zest.voyager.falcon.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target zest.voyager.falcon.apk
- Size 5.8MB
- SHA256 c55d0672880e00cc69777be9836ce9cabcda783f080b29cf912b0d1f6f587837
- MD5 e20ce633db159ecdd19f40f4f1305e83
- SHA1 4658d681862ee8a4e05601f9f3806569f201d5f5
- SHA512 293ffe9f9b98eda8acfa9c55c81ecff4e549a2da659e6003e2de589f1267e3f82ae5b0f5660ce3785d184828b7cab65e33c43a6ab038c0a8a276f962b1d7a951
- SSDEEP 98304:8f/S2XSGrO3TCqmury6lfESGY08gtIlZo/KrrCGE8ayWS:QS8S1TCqzrZEXYoUqbS
- TLSH T14356E08BFB44A96AC0F753B64536532245474D268B83D7835E58723C28BB6D07F8EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.