Analysis
- user interaction
yes - max time network
899s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
30/09/2026, 04:26
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
biscoito.apk
Resource
android-x64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
biscoito.apk
Resource
android-x64-arm64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
biscoito.apk
Resource
android-33-x64-arm64-20260708-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
biscoito.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
biscoito.apk
Resource
android-35-x64-arm64-20260721-en
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
biscoito.apk
Resource
android-x86-arm-20260325-en
1 signatures
900 seconds
General
- Target biscoito.apk
- Size 5.0MB
- Sample260930-e2qhsssx3r
- SHA256 c95db16a01b00b724deb53e133c0586ecdcc4950982e3d397ee5400524f6d6c6
- MD5 9e47b246595c45bd1e9a045a8edece86
- SHA1 bc7bd6ca8fbd86943d1e5b969313c5e155e38063
- SHA512 8a1e970989fbfb1b058ad5e77acd5e30a78731c977a491ce46484ba71e80bfcce414452affc5c9e831f0021553d1795402f930df8b503a72bdd477951bc18ba2
- SSDEEP 98304:b0GMPPDkxA9nyq59eT7LUOGQtKo/KrrHT5T1OYlbTcoO:wBdS3eQyfncF
- TLSH T1DF36DF8BFB88A96BC4F753B24536532245474C268B83D6C36D58723C18BB5D07F9ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 21 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 11 checkip.amazonaws.com 84 checkip.amazonaws.com 92 checkip.amazonaws.com 109 checkip.amazonaws.com 160 checkip.amazonaws.com 95 checkip.amazonaws.com 116 checkip.amazonaws.com 148 checkip.amazonaws.com 157 checkip.amazonaws.com 169 checkip.amazonaws.com 176 checkip.amazonaws.com 211 checkip.amazonaws.com 139 checkip.amazonaws.com 179 checkip.amazonaws.com 188 checkip.amazonaws.com 191 checkip.amazonaws.com 194 checkip.amazonaws.com 201 checkip.amazonaws.com 102 checkip.amazonaws.com 133 checkip.amazonaws.com 204 checkip.amazonaws.com