General
- Target V6.apk
- Size 5.8MB
- Sample260824-prvd4sgl6x
- SHA256 909332d884fb5233ead6b7a574251fefcd12a98491562f267275359967bb72f3
- MD5 72235834e3cb7e468edb8252d5ed634b
- SHA1 e17fcc6afb9245a2558650fc5610d857dcbe3e34
- SHA512 36368332266922bcce66546d62b93ee172391e2c2f5de6ba0d0c8b2b4d560ff6b7030f974773a9570ff6932ec468928985169d85ed947da8510a196d43a4323c
- SSDEEP 98304:s4NCQrudiw4ULDD8bJunxQbQyYU8n3pyn0o3wsjmuwcdnmy/RtCXaHM5Bo:lwQrud1RDgexQbQT3py0o3wsznmyuo
- TLSH T1D556DF47F784992EC0F7A37105791332160B4C26CB539A87B95C727C3AB7AE41E8A6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
V6.apk
Resource
android-x86-arm-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
V6.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
V6.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target V6.apk
- Size 5.8MB
- SHA256 909332d884fb5233ead6b7a574251fefcd12a98491562f267275359967bb72f3
- MD5 72235834e3cb7e468edb8252d5ed634b
- SHA1 e17fcc6afb9245a2558650fc5610d857dcbe3e34
- SHA512 36368332266922bcce66546d62b93ee172391e2c2f5de6ba0d0c8b2b4d560ff6b7030f974773a9570ff6932ec468928985169d85ed947da8510a196d43a4323c
- SSDEEP 98304:s4NCQrudiw4ULDD8bJunxQbQyYU8n3pyn0o3wsjmuwcdnmy/RtCXaHM5Bo:lwQrud1RDgexQbQT3py0o3wsznmyuo
- TLSH T1D556DF47F784992EC0F7A37105791332160B4C26CB539A87B95C727C3AB7AE41E8A6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Reads the content of SMS inbox messages.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Obfuscated Files or Information
1Virtualization/Sandbox Evasion
2System Checks
2