General
- Target XNXX.apk
- Size 6.2MB
- Sample260824-vm2khs1cqc
- SHA256 095be5dff1b76c391916145602a7d04b0987b233f37e53ea8ede2d64f49eda90
- MD5 c2c462ec984b319324fa9633d4dd8b70
- SHA1 b7960860da6476c65b847bbf881a94439b894647
- SHA512 bafdad20c46e1b7ba61ffce0b3a011dc12d3890afa28bb3923a15dfd0f7ee8d369e7056bc087b668211f1a2a30cd4a11098d1257a974f9162d5437f70193e0df
- SSDEEP 196608:NyZeVfIVynIx3BHLS8DULAV3JiENJZC0nYxzh1b:0eVbIx3BHLS8Dig7JZC+Yx7b
- TLSH T17C66E1C6F769EA2FC47731724C5A5231266A4D268E429787684C3F2C38B75E80F4DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
XNXX.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
XNXX.apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
XNXX.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target XNXX.apk
- Size 6.2MB
- SHA256 095be5dff1b76c391916145602a7d04b0987b233f37e53ea8ede2d64f49eda90
- MD5 c2c462ec984b319324fa9633d4dd8b70
- SHA1 b7960860da6476c65b847bbf881a94439b894647
- SHA512 bafdad20c46e1b7ba61ffce0b3a011dc12d3890afa28bb3923a15dfd0f7ee8d369e7056bc087b668211f1a2a30cd4a11098d1257a974f9162d5437f70193e0df
- SSDEEP 196608:NyZeVfIVynIx3BHLS8DULAV3JiENJZC0nYxzh1b:0eVbIx3BHLS8Dig7JZC+Yx7b
- TLSH T17C66E1C6F769EA2FC47731724C5A5231266A4D268E429787684C3F2C38B75E80F4DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
1System Checks
1