General
- Target JT-Express.apk
- Size 6.8MB
- Sample260905-l5mpmsyyay
- SHA256 516ffca58151af78c86516aaa9cdf166bb22ed29763ce08b3a552cf7b5ac2291
- MD5 f41288aebe084a667754a52288f14cef
- SHA1 4382157bb7c8f8f23a4e91f67d9ab5a8d8bd7c3a
- SHA512 704948f0751855d4337cfd7d16d6ca56830715d718ce7e2361410087b9f4f28c4133f84cc0a2a494107681aa62e792fc52505e02f6baa22573611e89ce553b68
- SSDEEP 196608:WM+BcUfrsVfxJgXSL33ARXT84ONymbbdcIM7:WM+2cgJxJtQpTNONhcIM
- TLSH T10D7623A7B785452EC4B741324E6E123022574E968D93AB4BB454331C68B3AC89F9FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
JT-Express.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target JT-Express.apk
- Size 6.8MB
- SHA256 516ffca58151af78c86516aaa9cdf166bb22ed29763ce08b3a552cf7b5ac2291
- MD5 f41288aebe084a667754a52288f14cef
- SHA1 4382157bb7c8f8f23a4e91f67d9ab5a8d8bd7c3a
- SHA512 704948f0751855d4337cfd7d16d6ca56830715d718ce7e2361410087b9f4f28c4133f84cc0a2a494107681aa62e792fc52505e02f6baa22573611e89ce553b68
- SSDEEP 196608:WM+BcUfrsVfxJgXSL33ARXT84ONymbbdcIM7:WM+2cgJxJtQpTNONhcIM
- TLSH T10D7623A7B785452EC4B741324E6E123022574E968D93AB4BB454331C68B3AC89F9FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks the presence of a debugger