General
- Target Yellow+Craft_5.1_APKPure.apk
- Size 28.1MB
- Sample260830-12m9bsan61
- SHA256 d6d5c2743007307672efed93be03fa5bcf2257799fc8e746dfdab8d9779d5108
- MD5 3347cc649b8a412a6d0b7f69ce73e25b
- SHA1 e88e0bb2f296512591c8ec90d051e25cc2eb930a
- SHA512 af728210d0756c81e4ddad00078214a3f6789ccc6c287f995cdbda2b39d127c583112f5310445ed76cecb24544b9c730e5d58934fb989b3ef90add6222501fb9
- SSDEEP 786432:qUm7ruG89FLbBdP6wc9hOWqObeLazUPtRuVESE1unaQAWJzENj5yXBMyg3:MuGULVxCmWqOb7zOtuOZPNFyyyg3
- TLSH T1595733AD0E88F3E9F361D023CB3C5D4D6D40A1152983DCFFE5DBF92852B664CA146A98
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Yellow+Craft_5.1_APKPure.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target Yellow+Craft_5.1_APKPure.apk
- Size 28.1MB
- SHA256 d6d5c2743007307672efed93be03fa5bcf2257799fc8e746dfdab8d9779d5108
- MD5 3347cc649b8a412a6d0b7f69ce73e25b
- SHA1 e88e0bb2f296512591c8ec90d051e25cc2eb930a
- SHA512 af728210d0756c81e4ddad00078214a3f6789ccc6c287f995cdbda2b39d127c583112f5310445ed76cecb24544b9c730e5d58934fb989b3ef90add6222501fb9
- SSDEEP 786432:qUm7ruG89FLbBdP6wc9hOWqObeLazUPtRuVESE1unaQAWJzENj5yXBMyg3:MuGULVxCmWqOb7zOtuOZPNFyyyg3
- TLSH T1595733AD0E88F3E9F361D023CB3C5D4D6D40A1152983DCFFE5DBF92852B664CA146A98
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger