General
- Target BitLife-mod-apk-v3.25.1-bitlifemodzapk.com.apk
- Size 303.1MB
- Sample261003-1bqa1axfjf
- SHA256 c2111dee01a5d28f0a5f6cfb61bcf2d513a53d8f8ef0f530265da9240f215c1d
- MD5 834e019235ce4f21c8f0bbe37b45c457
- SHA1 31e684ba05da03061f5a0f5fcea7880e1950601b
- SHA512 5d79936bff92245858d1bbc65c7702d001affce76085bfd967d70bf62fedf319e581478657a114b05dceafbbf22a609fe620c0e33ca4936c1be126c5c8c17b69
- SSDEEP 6291456:VOljCHeCr7EgCwzo0Q0OuQqePQYnHeh+W2eb5PZ:VONIevlwcBjtPQrrbv
- TLSH T1BCE80113E7525D33D5BE833A98FA47147B326D89A7435B472004F6B8BCB32D46EA52C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BitLife-mod-apk-v3.25.1-bitlifemodzapk.com.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral2
Sample
isdk.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral3
Sample
isdk.apk
Resource
android-x64-20260721-en
Behavioral task
behavioral4
Sample
isdk.apk
Resource
android-x64-arm64-20260721-en
Behavioral task
behavioral5
Sample
sdk.apk
Resource
android-33-x64-arm64-20260708-en
Malware Config
Targets
-
- Target BitLife-mod-apk-v3.25.1-bitlifemodzapk.com.apk
- Size 303.1MB
- SHA256 c2111dee01a5d28f0a5f6cfb61bcf2d513a53d8f8ef0f530265da9240f215c1d
- MD5 834e019235ce4f21c8f0bbe37b45c457
- SHA1 31e684ba05da03061f5a0f5fcea7880e1950601b
- SHA512 5d79936bff92245858d1bbc65c7702d001affce76085bfd967d70bf62fedf319e581478657a114b05dceafbbf22a609fe620c0e33ca4936c1be126c5c8c17b69
- SSDEEP 6291456:VOljCHeCr7EgCwzo0Q0OuQqePQYnHeh+W2eb5PZ:VONIevlwcBjtPQrrbv
- TLSH T1BCE80113E7525D33D5BE833A98FA47147B326D89A7435B472004F6B8BCB32D46EA52C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Checks the presence of a debugger
-
- Target isdk
- Size 616KB
- SHA256 14848f3a6841d1fb4325275a203b2d0c2a42b14833d1130f92e9367094b14be6
- MD5 f694673119f3282552ce74f58cf0070a
- SHA1 5c445ab6f76805ae2a3aeda311ff6d10be53f9d7
- SHA512 867ec046585cafc78312cc375633656a0ff2aeefff75e7d137bd81e7d00b3f4af5179ddd79203087257bd9bedbe3f147b6001eb496b25a270cc2ed1c2d7b8b10
- SSDEEP 12288:lmpHBLm4q0cZebKyLiPS4J1bbFljbcNxFQEysddvpQouG6O4w0scbP7ZnfcEUfI:opH058eyLcS4J90mzEdt0RbzKBI
- TLSH T10CD4231579EE2166D2C18B871FBE75E80031D039EA0E3F7E150A1E690AA31DF4AD758F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sdk.bin
- Size 716KB
- SHA256 8b2a6ed5ff792858454e26431887ce04bc831857dc89a409f9fed7b3b248378a
- MD5 de0dd92dd703ca255895d81efda8ed67
- SHA1 bc6028f4970f368262bc14423404a23dd93047c4
- SHA512 eadf07b5677037d4a00bd43e199f885aef02b9f37b3de831f65978d89cf43bc7c42e94179c55508bb726ae33808333b1812539d7817f4eafd180f64cd6ab6ac3
- SSDEEP 12288:2C6pxkDWZBdUl0COyE9HVuEwTERvgkC8oApVFiKUh7kOQf/4G6ft:w9BGNeQCp9Umf/4G6ft
- TLSH T120F48D43EB904D67C86A82395CF74340777EAD885703CB4B024AB6B97CB33D57A8668D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10