General
- Target grandways-release.apk
- Size 8.0MB
- Sample261002-pffftavygs
- SHA256 043ebed69763576c9e01c71afe80e1d60184ccd1c92e33d30da5e067f22d2bee
- MD5 a3d5b68627f1126ea24df4e6754f26b2
- SHA1 8c2e77f5e1073801ebcfe0eca0e30961a670b952
- SHA512 0b0728172a0e42ad4462ce724eb789fca1bf41b577a08225bb8f43f7a78105c151e2c3441db250bbc0142d7ca41875ce0d6e96a6e33435424eccdb3db41e990e
- SSDEEP 196608:Q23NNr4xsstEAjj7gSXiPooO6MMTof7kdDmBzlT/9RV:Q2dmvqOj7VSgoOYTof7E6nT/9b
- TLSH T1CB860146F7689A2FCC7640335D9A5231264B4DA78E8297877948375C38B76F80F89BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
grandways-release.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
grandways-release.apk
Resource
android-x64-20260325-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
grandways-release.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target grandways-release.apk
- Size 8.0MB
- SHA256 043ebed69763576c9e01c71afe80e1d60184ccd1c92e33d30da5e067f22d2bee
- MD5 a3d5b68627f1126ea24df4e6754f26b2
- SHA1 8c2e77f5e1073801ebcfe0eca0e30961a670b952
- SHA512 0b0728172a0e42ad4462ce724eb789fca1bf41b577a08225bb8f43f7a78105c151e2c3441db250bbc0142d7ca41875ce0d6e96a6e33435424eccdb3db41e990e
- SSDEEP 196608:Q23NNr4xsstEAjj7gSXiPooO6MMTof7kdDmBzlT/9RV:Q2dmvqOj7VSgoOYTof7E6nT/9b
- TLSH T1CB860146F7689A2FCC7640335D9A5231264B4DA78E8297877948375C38B76F80F89BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2