General
- Target CNT 5G.apk
- Size 4.6MB
- Sample260910-z6csqawfle
- SHA256 34476a8cf1a2d95cb5f34a130b2228df4f8b41459d30f05410c24ac03b4d3df6
- MD5 b0cd3c0a0fcb87e4a5b823cc25da22cc
- SHA1 063cdc348803112c2a637cb805f33fe6d52efbf6
- SHA512 9520f46cfa27ea710ce0f90ef4a2735575865f289c467dde60ab03627beee38db089b6021d29b1314587d5f2b3c02215dccd20a4a179c2f3405838fd6c386e58
- SSDEEP 98304:wY+30H9Ue1fGp3Q5IM6ujHDbtaWxPUUdj5d2XMpfy40Mk3KuFGG+b8n6HZN:uE9udQ5N6IHD8WlU41d64xPb8nEZN
- TLSH T1852633751A6878ECD60657F645E29923C548BCB7C6E035E8B32641E23A806C0F6F8FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
CNT 5G.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CNT 5G.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target CNT 5G.apk
- Size 4.6MB
- SHA256 34476a8cf1a2d95cb5f34a130b2228df4f8b41459d30f05410c24ac03b4d3df6
- MD5 b0cd3c0a0fcb87e4a5b823cc25da22cc
- SHA1 063cdc348803112c2a637cb805f33fe6d52efbf6
- SHA512 9520f46cfa27ea710ce0f90ef4a2735575865f289c467dde60ab03627beee38db089b6021d29b1314587d5f2b3c02215dccd20a4a179c2f3405838fd6c386e58
- SSDEEP 98304:wY+30H9Ue1fGp3Q5IM6ujHDbtaWxPUUdj5d2XMpfy40Mk3KuFGG+b8n6HZN:uE9udQ5N6IHD8WlU41d64xPb8nEZN
- TLSH T1852633751A6878ECD60657F645E29923C548BCB7C6E035E8B32641E23A806C0F6F8FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.