General
- Target My horror Aaron 10 [Nuclear Edition V2].apk
- Size 8.6MB
- Sample260913-a7abjs1vev
- SHA256 b0900b644134e028d07901b03f73a5a61b5cfe1bc7d4f1ae7ac703b9a9fd696c
- MD5 74f0e277dc69e98e21555ef58de06224
- SHA1 ee331083064e31c7d7085f6c49f8499484b4c7c2
- SHA512 376c9ac5514ac775b2a764337cb200bda34efd5f5760c3e9f38e4d802c8b6c0e61f4590ebc0071136dd132fe14a6014bce9178525a1f71d772ccfbf9c6043323
- SSDEEP 196608:gkuQ7mEf2+lAa7jYhO4VBxT8RtRxAf6W4Q0O0u:gJOmEf5lAaohN8RxLO0u
- TLSH T1009633868F9A5019CC664F3D126FC93364E27F5C1E2ADD405D48FBA118BEA67323A31D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral2
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
My horror Aaron 10 [Nuclear Edition V2].apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target My horror Aaron 10 [Nuclear Edition V2].apk
- Size 8.6MB
- SHA256 b0900b644134e028d07901b03f73a5a61b5cfe1bc7d4f1ae7ac703b9a9fd696c
- MD5 74f0e277dc69e98e21555ef58de06224
- SHA1 ee331083064e31c7d7085f6c49f8499484b4c7c2
- SHA512 376c9ac5514ac775b2a764337cb200bda34efd5f5760c3e9f38e4d802c8b6c0e61f4590ebc0071136dd132fe14a6014bce9178525a1f71d772ccfbf9c6043323
- SSDEEP 196608:gkuQ7mEf2+lAa7jYhO4VBxT8RtRxAf6W4Q0O0u:gJOmEf5lAaohN8RxLO0u
- TLSH T1009633868F9A5019CC664F3D126FC93364E27F5C1E2ADD405D48FBA118BEA67323A31D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Acquires the wake lock
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Changes the wallpaper (common with ransomware activity)