General
- Target E.One.apk
- Size 8.1MB
- Sample260824-wz3tsaee86
- SHA256 3aaed1a4c828f9331a85789434e5e187af6166b12f913ca5f69ae219c65297a3
- MD5 58087e7d46f8b48433a68c2be613e3fb
- SHA1 0f07d9f42b076c9b26078f40681aae8140c0e1a3
- SHA512 cf34a843e606c790f9a9d08f044b801b32d29bc3c62cbe53ed987394b057af8730022dff4c37d5fbbe3e1bdb9e50cb0997dcc9191e944dafc04f3ab89f33cf85
- SSDEEP 196608:JmON/RiB8fv0RK7DKRo/7usBbchEJRsKt:zN8BTBRo/nBwEJRsu
- TLSH T12E86029EF768992FD47710B20C6A5631124B4C12AB839773696C375C78BB6E80F4DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
E.One.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
E.One.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
E.One.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target E.One.apk
- Size 8.1MB
- SHA256 3aaed1a4c828f9331a85789434e5e187af6166b12f913ca5f69ae219c65297a3
- MD5 58087e7d46f8b48433a68c2be613e3fb
- SHA1 0f07d9f42b076c9b26078f40681aae8140c0e1a3
- SHA512 cf34a843e606c790f9a9d08f044b801b32d29bc3c62cbe53ed987394b057af8730022dff4c37d5fbbe3e1bdb9e50cb0997dcc9191e944dafc04f3ab89f33cf85
- SSDEEP 196608:JmON/RiB8fv0RK7DKRo/7usBbchEJRsKt:zN8BTBRo/nBwEJRsu
- TLSH T12E86029EF768992FD47710B20C6A5631124B4C12AB839773696C375C78BB6E80F4DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2