General
- Target download_34858816.apk
- Size 37.2MB
- Sample261001-3m7qjazzds
- SHA256 33cf89bd7e54a64aea5ebdc8aaf3863c4e17a89ebd528e2f292ace79676042f8
- MD5 0b1c0d22729b3f11f4729554998d7133
- SHA1 b11f0c22447053d5e695b6d6f7433b8135ecc642
- SHA512 ba129fad615e8945386e0b0f5ab45b9bbec8362d997b350631e49a984a7073b975b48c5107403900adaa506daf48e0fe6283680a53c0f257c33015e35a5e4958
- SSDEEP 786432:ikS3v1uOg0z0BJwEv10YMXOjAF8D/v+31s6nVtO80AEj0fn:i3c0YNsMFD/W3S6nzqxa
- TLSH T1B5870102EA06AA29CCAE963D74BD23017F369C995F4743071104F57A2FB36D1AB876CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
download_34858816.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral2
Sample
download_34858816.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
download_34858816.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral4
Sample
download_34858816.apk
Resource
android-35-x64-arm64-20260721-en
Malware Config
Targets
-
- Target download_34858816.apk
- Size 37.2MB
- SHA256 33cf89bd7e54a64aea5ebdc8aaf3863c4e17a89ebd528e2f292ace79676042f8
- MD5 0b1c0d22729b3f11f4729554998d7133
- SHA1 b11f0c22447053d5e695b6d6f7433b8135ecc642
- SHA512 ba129fad615e8945386e0b0f5ab45b9bbec8362d997b350631e49a984a7073b975b48c5107403900adaa506daf48e0fe6283680a53c0f257c33015e35a5e4958
- SSDEEP 786432:ikS3v1uOg0z0BJwEv10YMXOjAF8D/v+31s6nVtO80AEj0fn:i3c0YNsMFD/W3S6nzqxa
- TLSH T1B5870102EA06AA29CCAE963D74BD23017F369C995F4743071104F57A2FB36D1AB876CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3