General
- Target browsehere-net-app-release.apk
- Size 19.7MB
- Sample260826-zp14zsfc86
- SHA256 8965d2a3b9b73e200695b1969ee75d5fc82a24985d2daeed91c05777b2d95048
- MD5 2527cb924c01cea72830bd3bdd80ea40
- SHA1 201848aa2f316b379a1fc661319e9a048e4921c2
- SHA512 41906d10318c862261f131d3a8bbc4c7b1576944547a1f23865ce4a0e53cc46710c4de905dd5a259d8077a1cd557b0dec7ae1305b6e1e1eaa52f5bcc291e7557
- SSDEEP 393216:QMeCMRGzcKq0zWpVbDJOs3oMsVIJd/ZVyni8ed46vWXdZm/g5Fqms:NRMkoKqjotchVHdbvWX3udN
- TLSH T1CC270186E368EE2AC4B74032495D273E18594D28DB83D3D36A05739D68B3DF48E45BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
browsehere-net-app-release.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
browsehere-net-app-release.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
browsehere-net-app-release.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
browsehere-net-app-release.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
browsehere-net-app-release.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
browsehere-net-app-release.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target browsehere-net-app-release.apk
- Size 19.7MB
- SHA256 8965d2a3b9b73e200695b1969ee75d5fc82a24985d2daeed91c05777b2d95048
- MD5 2527cb924c01cea72830bd3bdd80ea40
- SHA1 201848aa2f316b379a1fc661319e9a048e4921c2
- SHA512 41906d10318c862261f131d3a8bbc4c7b1576944547a1f23865ce4a0e53cc46710c4de905dd5a259d8077a1cd557b0dec7ae1305b6e1e1eaa52f5bcc291e7557
- SSDEEP 393216:QMeCMRGzcKq0zWpVbDJOs3oMsVIJd/ZVyni8ed46vWXdZm/g5Fqms:NRMkoKqjotchVHdbvWX3udN
- TLSH T1CC270186E368EE2AC4B74032495D273E18594D28DB83D3D36A05739D68B3DF48E45BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1