General
- Target subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
- Size 246.4MB
- Sample260831-w4lfasybre
- SHA256 90bb40d455df572c8a45464cd8f379ea6098552c9a0dfa8070ffe39a7bb8b2b3
- MD5 c1868c8448cf7d40aff9064d331f41e3
- SHA1 c153e3356109d1508f9711702f48ab52fe8b5e64
- SHA512 4f6880052c4e31e8b5f4926595762eacd133f12b6d286e800121a667d516ca550a824e02b2e5e1df7e772c2b45f220c871bb14d52a141df00653083998cb76b2
- SSDEEP 6291456:YURQJNXgGWqxRdVy78+ZYmDLcKeSi0YF3U3FaQG:YURQJNLWMW8+ZrDLc+iJJIFBG
- TLSH T133C8123857EFA881C22931B084DA1B852CD5EEBFEA1157B95C27B01934F25CC9F6B12D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-x64-20260325-de
Behavioral task
behavioral2
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-x64-arm64-20260325-de
Behavioral task
behavioral3
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-33-x64-arm64-20260708-de
Behavioral task
behavioral4
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-34-x64-arm64-20260325.1-de
Behavioral task
behavioral5
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-35-x64-arm64-20260325-de
Behavioral task
behavioral6
Sample
subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
Resource
android-x86-arm-20260325-de
Malware Config
Targets
-
- Target subway-surfers-mod_3.68.0-v7v8_RBMODS.apk
- Size 246.4MB
- SHA256 90bb40d455df572c8a45464cd8f379ea6098552c9a0dfa8070ffe39a7bb8b2b3
- MD5 c1868c8448cf7d40aff9064d331f41e3
- SHA1 c153e3356109d1508f9711702f48ab52fe8b5e64
- SHA512 4f6880052c4e31e8b5f4926595762eacd133f12b6d286e800121a667d516ca550a824e02b2e5e1df7e772c2b45f220c871bb14d52a141df00653083998cb76b2
- SSDEEP 6291456:YURQJNXgGWqxRdVy78+ZYmDLcKeSi0YF3U3FaQG:YURQJNLWMW8+ZrDLc+iJJIFBG
- TLSH T133C8123857EFA881C22931B084DA1B852CD5EEBFEA1157B95C27B01934F25CC9F6B12D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
1System Checks
1