General
- Target V6.apk
- Size 5.8MB
- Sample260822-knw2baxsds
- SHA256 eedb2bc06789ac949c6b67bdb4e42c7f7005b0484692def13ffb8809060605f3
- MD5 4f153d9f9a71afc0680c4937314222aa
- SHA1 94b189ff3dec89651cc60981362191d79cf8cd1f
- SHA512 01b750a330b5cb5e5f44d7bfa90dc31f55ea8741f2b8d27e4a9a8f3f66a1f8f74779b49079b02b67f97ce4e59e7cec0e13a358755a7351e0f481d3f28ed31a2e
- SSDEEP 98304:lV4NCQrudiw4ULDD8bJunxQbQyYU8n3pyn0o3wsjmUu+dnYSuRtCXaHz5FVf:4wQrud1RDgexQbQT3py0o3ws1nYSMPVf
- TLSH T15256CE47F784992EC0F753B144791322120B4C268B539AC7BA5C727C3AB7AD85E8A7DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
V6.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
V6.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
V6.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target V6.apk
- Size 5.8MB
- SHA256 eedb2bc06789ac949c6b67bdb4e42c7f7005b0484692def13ffb8809060605f3
- MD5 4f153d9f9a71afc0680c4937314222aa
- SHA1 94b189ff3dec89651cc60981362191d79cf8cd1f
- SHA512 01b750a330b5cb5e5f44d7bfa90dc31f55ea8741f2b8d27e4a9a8f3f66a1f8f74779b49079b02b67f97ce4e59e7cec0e13a358755a7351e0f481d3f28ed31a2e
- SSDEEP 98304:lV4NCQrudiw4ULDD8bJunxQbQyYU8n3pyn0o3wsjmUu+dnYSuRtCXaHz5FVf:4wQrud1RDgexQbQT3py0o3ws1nYSMPVf
- TLSH T15256CE47F784992EC0F753B144791322120B4C268B539AC7BA5C727C3AB7AD85E8A7DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Reads the content of SMS inbox messages.
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries information about active data network
Queries the mobile country code (MCC)
Reads information about phone network operator.
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Obfuscated Files or Information
1Virtualization/Sandbox Evasion
2System Checks
2