General
- Target 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
- Size 9.4MB
- Sample260922-v5damsbe89
- SHA256 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a
- MD5 6b5399636bddba6e75dbd21e6c6226ac
- SHA1 a5343d8a9ba0b5c2d6cd77bad951bc3f200f2b34
- SHA512 7cd2257802ffe634096b714108b117f5804ab60c32b957487bffb092636587b0fd61231da58227933daddde7a640ae3fa685644c39e609d3b59c7fa1f7b1ee9a
- SSDEEP 98304:dPJc8hPWoP78htta0jXCVkVmzRzBiTJ0txlg8V:dPJtf8httRD+kYz+mX
- TLSH T1C0A6F013FB45C69BD4AAC3F06F271FA929430F18CA52AAE74194766E2D772D10DC1ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a.apk
- Size 9.4MB
- SHA256 3c53b424e3360636b76e587e594a0fe50f379df4c5d451d619c3c8588242980a
- MD5 6b5399636bddba6e75dbd21e6c6226ac
- SHA1 a5343d8a9ba0b5c2d6cd77bad951bc3f200f2b34
- SHA512 7cd2257802ffe634096b714108b117f5804ab60c32b957487bffb092636587b0fd61231da58227933daddde7a640ae3fa685644c39e609d3b59c7fa1f7b1ee9a
- SSDEEP 98304:dPJc8hPWoP78htta0jXCVkVmzRzBiTJ0txlg8V:dPJtf8httRD+kYz+mX
- TLSH T1C0A6F013FB45C69BD4AAC3F06F271FA929430F18CA52AAE74194766E2D772D10DC1ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Input Injection
1Obfuscated Files or Information
1