General
- Target Ravenfield-Ravenfield.apk
- Size 3.8MB
- Sample261002-h3flrswt4l
- SHA256 b836eee9d86d97fdd6a41aa66a9908bd4e9da3ea4a1934f99ab0da077fcf76fc
- MD5 925f073d2924ce7054edabb31baa11ed
- SHA1 016f40523deb8e4be8c43616250e99488633d47c
- SHA512 cb8122afd3ef59494622f4ffc16576bb29fde69e662530d5dba13ea461622f3249f2699b001573873eba7c54eb7d99431032d41fdf8750536e50be369d2c4a93
- SSDEEP 98304:LtBf3BPShCLhyd2Ww+3RKbLD0bxIDXYvcQNX:LDf35Sqhyd2DSRO01HUQNX
- TLSH T175160246FA98EE1BC873C03347B54A7691469D598A42E60B390C735C7FB79D48E82BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Ravenfield-Ravenfield.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Ravenfield-Ravenfield.apk
- Size 3.8MB
- SHA256 b836eee9d86d97fdd6a41aa66a9908bd4e9da3ea4a1934f99ab0da077fcf76fc
- MD5 925f073d2924ce7054edabb31baa11ed
- SHA1 016f40523deb8e4be8c43616250e99488633d47c
- SHA512 cb8122afd3ef59494622f4ffc16576bb29fde69e662530d5dba13ea461622f3249f2699b001573873eba7c54eb7d99431032d41fdf8750536e50be369d2c4a93
- SSDEEP 98304:LtBf3BPShCLhyd2Ww+3RKbLD0bxIDXYvcQNX:LDf35Sqhyd2DSRO01HUQNX
- TLSH T175160246FA98EE1BC873C03347B54A7691469D598A42E60B390C735C7FB79D48E82BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2