General
- Target Surewin888.apk
- Size 5.0MB
- Sample260910-k7rkya1cmc
- SHA256 05051bbc587303278b1f9aad3bfd79d5b8c2e50d53906c260ecacfc120f31a55
- MD5 c7abf1f17f2cbcc2720d089c2256742d
- SHA1 0fc95ea29eada2abcf6bc0f7595fda9f6276819e
- SHA512 090f43b39714e6041d189bd1922677e962e04ae27a034899c166513a21a1a1b4752318c3ad18c9f7bdba1a3003faffd52ead529efdb9b77029a9eb45c365baf5
- SSDEEP 98304:L/0/XzTINo9eqRJrz6x/AjSqStzY8Vb25A5X/4ZC1ruHU5YDa1AdPio+p0+3pa:r0vn2VMJrtSnRAosU5Y21wiHc
- TLSH T19A36018AFF5CBD2FC47B40320B5A923536574D158E82DB476848376CA877AE84F89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Surewin888.apk
Resource
android-x86-arm-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Surewin888.apk
Resource
android-x64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
Surewin888.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Surewin888.apk
- Size 5.0MB
- SHA256 05051bbc587303278b1f9aad3bfd79d5b8c2e50d53906c260ecacfc120f31a55
- MD5 c7abf1f17f2cbcc2720d089c2256742d
- SHA1 0fc95ea29eada2abcf6bc0f7595fda9f6276819e
- SHA512 090f43b39714e6041d189bd1922677e962e04ae27a034899c166513a21a1a1b4752318c3ad18c9f7bdba1a3003faffd52ead529efdb9b77029a9eb45c365baf5
- SSDEEP 98304:L/0/XzTINo9eqRJrz6x/AjSqStzY8Vb25A5X/4ZC1ruHU5YDa1AdPio+p0+3pa:r0vn2VMJrtSnRAosU5Y21wiHc
- TLSH T19A36018AFF5CBD2FC47B40320B5A923536574D158E82DB476848376CA877AE84F89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2Tasks
static1
Score
6/10
behavioral1
defense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral2
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral3
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10