General
- Target Union-Bank.apk
- Size 5.3MB
- Sample260916-e8ttsshf68
- SHA256 d9cb27212e0061ee3db2e67304ac836152ec5fdc79fe68fc46c23aa2cf30fc54
- MD5 873d07ff19626c3b928eede70831ba63
- SHA1 8367d6441df1807197ec88647d1bbfd1043d9d01
- SHA512 491670ccb4d167e234fa6bb963f3b220d5cbb0072b7ad67602ff557d52be438abb1d409954e4c52309c9627f52434bebc24f7bb243e89cdb95c94ce020efdef4
- SSDEEP 98304:+7/VcaBXnA6wbX8Ila+e7H0ebujOIGxiyzyH5YMZvoTwrkaRgFQLmT5dDlcsG:+7/VvQ6IMIldveyaWRgFrhK
- TLSH T10846E0C7F7D4589AC4F79332C57A12A2550B4C268B83DEC7BD54723C28BB6C44E99AC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Union-Bank.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Union-Bank.apk
Resource
android-x64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Union-Bank.apk
Resource
android-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
dbliqgnjl.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Union-Bank.apk
- Size 5.3MB
- SHA256 d9cb27212e0061ee3db2e67304ac836152ec5fdc79fe68fc46c23aa2cf30fc54
- MD5 873d07ff19626c3b928eede70831ba63
- SHA1 8367d6441df1807197ec88647d1bbfd1043d9d01
- SHA512 491670ccb4d167e234fa6bb963f3b220d5cbb0072b7ad67602ff557d52be438abb1d409954e4c52309c9627f52434bebc24f7bb243e89cdb95c94ce020efdef4
- SSDEEP 98304:+7/VcaBXnA6wbX8Ila+e7H0ebujOIGxiyzyH5YMZvoTwrkaRgFQLmT5dDlcsG:+7/VvQ6IMIldveyaWRgFrhK
- TLSH T10846E0C7F7D4589AC4F79332C57A12A2550B4C268B83DEC7BD54723C28BB6C44E99AC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
- Target dbliqgnjl.dat
- Size 3.4MB
- SHA256 287962fc495e60daddbc524403e9ab7aae812c64e5cf38cab46dae09a17e687c
- MD5 398074545079641f3db99fdef958d9de
- SHA1 4b878d4dfec71e4a37709a46acfe20a73de6648e
- SHA512 ec3a26483dffff3b997a4a6c824a78e50094923239268ccd3e561efcc90fe5c15153e831d2efdc577531e1306f6505466566935db0b4b41fcf3fbaccd583e092
- SSDEEP 98304:LTm1E1M3tGkrrd+6OD9XXAe6X74gbabu1HTiX1:LLmrS9geE0gbKIiF
- TLSH T181F5EF86F769A72FC87645334DFA82311216AC03CE43A7477548736C78B76A80F99BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Reads the content of the SMS messages.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network