General
- Target RuStore-mobile-1.110.0.5.apk
- Size 82.8MB
- Sample261001-nn3eways6k
- SHA256 b08ae72c79fb6f615ce43b1e1655c0abe1a834b34378843e14611074c62152b3
- MD5 b94d7935da79bb7aba435af72b94c097
- SHA1 f4c2e09b353d5c92de11d41f617c3dc49cf27ac3
- SHA512 266db95371ad4158874dfa0491d4240fe0b53fd739ca92dcbb431c49e6aa424eb6d11c610200a5bd4d2c9fb9a5d98283be5e09e102a90ab857dca425378f8246
- SSDEEP 1572864:5SdzPnDYrOQ6edmVebS2FsvkNkA6hHWyEKA3KNgaS7rrrDynEvVEbAQbpn/KOkOq:8zPniOQ6e0VebSwvqAWHWyEKYKNgaS7b
- TLSH T10718E006F64948AED8B5E47C864F8237EB257C494322D28B5A147A18BF777E09F2D3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
RuStore-mobile-1.110.0.5.apk
Resource
android-x64-arm64-20260325-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target RuStore-mobile-1.110.0.5.apk
- Size 82.8MB
- SHA256 b08ae72c79fb6f615ce43b1e1655c0abe1a834b34378843e14611074c62152b3
- MD5 b94d7935da79bb7aba435af72b94c097
- SHA1 f4c2e09b353d5c92de11d41f617c3dc49cf27ac3
- SHA512 266db95371ad4158874dfa0491d4240fe0b53fd739ca92dcbb431c49e6aa424eb6d11c610200a5bd4d2c9fb9a5d98283be5e09e102a90ab857dca425378f8246
- SSDEEP 1572864:5SdzPnDYrOQ6edmVebS2FsvkNkA6hHWyEKA3KNgaS7rrrDynEvVEbAQbpn/KOkOq:8zPniOQ6e0VebSwvqAWHWyEKYKNgaS7b
- TLSH T10718E006F64948AED8B5E47C864F8237EB257C494322D28B5A147A18BF777E09F2D3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Subvert Trust Controls
1Code Signing Policy Modification
1