General
- Target jaffacakes118_PM KISAN YOJANA W10-5.apk
- Size 5.7MB
- Sample260912-vb469s1bma
- SHA256 28ef43871c7752fd004b3ff751aaa3d9518b3739ea4b31bb7ce3e92fccb21de6
- MD5 08cb9f477899ee54393e798bccae13cd
- SHA1 bd9bbe26008d2b54f58f2d91022a18278de40da7
- SHA512 de9b1981f2ef71bd0b9aed1c5b0a6af7506195b5278730de13e0bdc25f06d2dab681fcda40055d98f43e8c8dc7844d56eade64138470b82daab1f446c708e93b
- SSDEEP 98304:W4ucZmL+kviIMrlfrsf1a2TIWMTsZdTNFZFcOCOjUAJutmpx69yv:WKZS+kvV6w9aCI3sZdxdcOCDAlz6i
- TLSH T185562242E3C9BD1FDD7782360BBA4A7B51468D868256D3578825728C4DFBAC04F86FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_PM KISAN YOJANA W10-5.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
jaffacakes118_PM KISAN YOJANA W10-5.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
jaffacakes118_PM KISAN YOJANA W10-5.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
kisan.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral5
Sample
kisan.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral6
Sample
kisan.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target jaffacakes118_PM KISAN YOJANA W10-5.apk
- Size 5.7MB
- SHA256 28ef43871c7752fd004b3ff751aaa3d9518b3739ea4b31bb7ce3e92fccb21de6
- MD5 08cb9f477899ee54393e798bccae13cd
- SHA1 bd9bbe26008d2b54f58f2d91022a18278de40da7
- SHA512 de9b1981f2ef71bd0b9aed1c5b0a6af7506195b5278730de13e0bdc25f06d2dab681fcda40055d98f43e8c8dc7844d56eade64138470b82daab1f446c708e93b
- SSDEEP 98304:W4ucZmL+kviIMrlfrsf1a2TIWMTsZdTNFZFcOCOjUAJutmpx69yv:WKZS+kvV6w9aCI3sZdxdcOCDAlz6i
- TLSH T185562242E3C9BD1FDD7782360BBA4A7B51468D868256D3578825728C4DFBAC04F86FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target kisan.apk
- Size 2.4MB
- SHA256 367cf3fdbc3e35fa930f36f9aa0686f8b20ae97722758eec3f277cd4d8d53371
- MD5 64805c15ed38316a739e1cf6d7451bd2
- SHA1 ef0beb85ab76b30a58d18342d526edd544cae692
- SHA512 eb028dd39419fcaed36db821158b74293cd73dcae9ed66fcca457ad538146f0795cbf7c1811804505c81ee610e5dccb40e330268c8f92c8f33d75c7235775554
- SSDEEP 49152:K4EHLPnbrEhAIm/o2pkwkozq402RWlQXEZVlTMjgfnlwjEIlkX45bn5Pp1:8rbrwAk2S/BD2kyalTQgfnwE2WSb5D
- TLSH T170C52306E76AF50DF87782340D6202AA118B2F92CC56E32B9661339C5AF39D59F31FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Obfuscated Files or Information
1Virtualization/Sandbox Evasion
2System Checks
2