Analysis
- user interaction
yes - max time network
896s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
30/09/2026, 04:26
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
biscoito.apk
Resource
android-x64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
biscoito.apk
Resource
android-x64-arm64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
biscoito.apk
Resource
android-33-x64-arm64-20260708-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
biscoito.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
biscoito.apk
Resource
android-35-x64-arm64-20260721-en
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
biscoito.apk
Resource
android-x86-arm-20260325-en
1 signatures
900 seconds
General
- Target biscoito.apk
- Size 5.0MB
- Sample260930-e2qhsssx3r
- SHA256 c95db16a01b00b724deb53e133c0586ecdcc4950982e3d397ee5400524f6d6c6
- MD5 9e47b246595c45bd1e9a045a8edece86
- SHA1 bc7bd6ca8fbd86943d1e5b969313c5e155e38063
- SHA512 8a1e970989fbfb1b058ad5e77acd5e30a78731c977a491ce46484ba71e80bfcce414452affc5c9e831f0021553d1795402f930df8b503a72bdd477951bc18ba2
- SSDEEP 98304:b0GMPPDkxA9nyq59eT7LUOGQtKo/KrrHT5T1OYlbTcoO:wBdS3eQyfncF
- TLSH T1DF36DF8BFB88A96BC4F753B24536532245474C268B83D6C36D58723C18BB5D07F9ABC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 18 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 51 checkip.amazonaws.com 54 checkip.amazonaws.com 61 checkip.amazonaws.com 110 checkip.amazonaws.com 118 checkip.amazonaws.com 134 checkip.amazonaws.com 42 checkip.amazonaws.com 85 checkip.amazonaws.com 95 checkip.amazonaws.com 113 checkip.amazonaws.com 142 checkip.amazonaws.com 36 checkip.amazonaws.com 88 checkip.amazonaws.com 104 checkip.amazonaws.com 125 checkip.amazonaws.com 30 checkip.amazonaws.com 76 checkip.amazonaws.com 137 checkip.amazonaws.com