General
- Target 128.apk
- Size 4.4MB
- Sample260913-w5nbaack71
- SHA256 ad031c7b1e72c6d0af9cf28f8909cf80e044531464da2275ee34aae628d93c53
- MD5 4500140c4e9799065758cfea26c513f8
- SHA1 a097c8bdc412a558e5abfaadef2d40698fa45381
- SHA512 2f70f9ffc9e3c77d0c96d1750ecefa754fced7faaeb8c0064958c0a3c228a4f79438de03fa0a6d8213ab119eeada49adb35875cce56e3f513e9d8f01098e10f0
- SSDEEP 98304:bTQak5ooPr5NV/yI7UQvtN8cAppE8orhzZYpCZ+xrFJb3s:372Pr5NpyqLv0m8otzZYpCCb3s
- TLSH T10A26E087F758992FC8B350F24D6E5272164B4C528E839B477D48372C28776E82F89BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
128.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
128.apk
Resource
android-35-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 128.apk
- Size 4.4MB
- SHA256 ad031c7b1e72c6d0af9cf28f8909cf80e044531464da2275ee34aae628d93c53
- MD5 4500140c4e9799065758cfea26c513f8
- SHA1 a097c8bdc412a558e5abfaadef2d40698fa45381
- SHA512 2f70f9ffc9e3c77d0c96d1750ecefa754fced7faaeb8c0064958c0a3c228a4f79438de03fa0a6d8213ab119eeada49adb35875cce56e3f513e9d8f01098e10f0
- SSDEEP 98304:bTQak5ooPr5NV/yI7UQvtN8cAppE8orhzZYpCZ+xrFJb3s:372Pr5NpyqLv0m8otzZYpCCb3s
- TLSH T10A26E087F758992FC8B350F24D6E5272164B4C528E839B477D48372C28776E82F89BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger