General
- Target WannaCry_4.0_APKPure.apk
- Size 3.6MB
- Sample261002-w2s3csxs4p
- SHA256 e6beaca5bcb28a07da16d3f42997d1f6ad23290fcfc9f7c01fbca47deba82d70
- MD5 471f608aa4bb04b7005550611ce85229
- SHA1 2a9ccf8310cb85c93a4f913aadd232dae1261086
- SHA512 6e3f61520e5ef9a0ca441cdfef7490dbbacbd637457fcc20af66b27935c10b48d4e72917df0f8c09bfa75e1641db9e295be65ef581a63ff5c96a447be684aecf
- SSDEEP 98304:dUy2qXTM+lsVOpZLFaVMPf8yD1g+JVFNm:D2qwd0FZrBgmNm
- TLSH T19906F193F399A92BC8F3C3324275963AA646CC208747E7532945B27C99FFDD04A45BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
WannaCry_4.0_APKPure.apk
Resource
android-x86-arm-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
WannaCry_4.0_APKPure.apk
Resource
android-x64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
WannaCry_4.0_APKPure.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target WannaCry_4.0_APKPure.apk
- Size 3.6MB
- SHA256 e6beaca5bcb28a07da16d3f42997d1f6ad23290fcfc9f7c01fbca47deba82d70
- MD5 471f608aa4bb04b7005550611ce85229
- SHA1 2a9ccf8310cb85c93a4f913aadd232dae1261086
- SHA512 6e3f61520e5ef9a0ca441cdfef7490dbbacbd637457fcc20af66b27935c10b48d4e72917df0f8c09bfa75e1641db9e295be65ef581a63ff5c96a447be684aecf
- SSDEEP 98304:dUy2qXTM+lsVOpZLFaVMPf8yD1g+JVFNm:D2qwd0FZrBgmNm
- TLSH T19906F193F399A92BC8F3C3324275963AA646CC208747E7532945B27C99FFDD04A45BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2