Analysis
- user interaction
yes - max time network
904s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
30/09/2026, 04:26
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
biscoito.apk
Resource
android-x64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
biscoito.apk
Resource
android-x64-arm64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
biscoito.apk
Resource
android-33-x64-arm64-20260708-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
biscoito.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
biscoito.apk
Resource
android-35-x64-arm64-20260721-en
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
biscoito.apk
Resource
android-x86-arm-20260325-en
1 signatures
900 seconds
General
- Target biscoito.apk
- Size 5.0MB
- Sample260930-e2qhsssx3r
- SHA256 c95db16a01b00b724deb53e133c0586ecdcc4950982e3d397ee5400524f6d6c6
- MD5 9e47b246595c45bd1e9a045a8edece86
- SHA1 bc7bd6ca8fbd86943d1e5b969313c5e155e38063
- SHA512 8a1e970989fbfb1b058ad5e77acd5e30a78731c977a491ce46484ba71e80bfcce414452affc5c9e831f0021553d1795402f930df8b503a72bdd477951bc18ba2
- SSDEEP 98304:b0GMPPDkxA9nyq59eT7LUOGQtKo/KrrHT5T1OYlbTcoO:wBdS3eQyfncF
- TLSH T1DF36DF8BFB88A96BC4F753B24536532245474C268B83D6C36D58723C18BB5D07F9ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 25 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 150 checkip.amazonaws.com 195 checkip.amazonaws.com 217 checkip.amazonaws.com 233 checkip.amazonaws.com 238 checkip.amazonaws.com 111 checkip.amazonaws.com 161 checkip.amazonaws.com 187 checkip.amazonaws.com 220 checkip.amazonaws.com 115 checkip.amazonaws.com 118 checkip.amazonaws.com 170 checkip.amazonaws.com 177 checkip.amazonaws.com 184 checkip.amazonaws.com 203 api.ipify.org 204 api.ipify.org 206 checkip.amazonaws.com 142 checkip.amazonaws.com 202 checkip.amazonaws.com 209 checkip.amazonaws.com 225 checkip.amazonaws.com 228 checkip.amazonaws.com 246 checkip.amazonaws.com 43 checkip.amazonaws.com 136 checkip.amazonaws.com