Resubmissions

05/10/2026, 08:16

261005-j59s3a1w3l7

05/10/2026, 08:14

261005-j46d9axeqf7

05/10/2026, 08:12

261005-j37kxs1v9l7

General

  • Target
    progoroskop.apk
  • Size 4.5MB
  • Sample261005-j46d9axeqf
  • SHA256 e03199bc6ec296c0818874752ebfe5147acaa91e09f30ee22acd98ac18880cbc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      progoroskop.apk
    • Size 4.5MB
    • SHA256 e03199bc6ec296c0818874752ebfe5147acaa91e09f30ee22acd98ac18880cbc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Declares services with permission to bind to the system

    • Requests allowing to install additional applications from unknown sources.

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks