General
- Target hi88_1.0.8_20260402.1426_release.apk
- Size 7.7MB
- Sample261006-as6ffayxgs
- SHA256 84684fb3e6ee9240ebd9c833d10f8c70e12e37a4e97c65d4bb7703d6ea5b6229
- MD5 075ecb81e576a4b4d6fd222114af0a3d
- SHA1 d1ecd77e169d359ff417225cb0cee464bbf07d03
- SHA512 47d3e63579e4f1238efd10ca0d238e55a2fe26a823d66fbb09bd39a1179c91c0b8f7b7e7e4b1fcaed1ec06ec67774943dbca1440702b908320d815bc4c562327
- SSDEEP 98304:TQsSep28/eBDM4SOJbUgiDHEzxUwCCmhwigtqyfMc+6YpfXzaj4QTAstffrfh2J:TQJOPeBYgxxWCLtqyfMcdYpi4cAsk
- TLSH T10B86CECAB388DF1BCC331172C89A153533678D6A5A474A76691837F829372B46F49FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
hi88_1.0.8_20260402.1426_release.apk
Resource
android-x86-arm-20260721-en
Behavioral task
behavioral2
Sample
hi88_1.0.8_20260402.1426_release.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
hi88_1.0.8_20260402.1426_release.apk
Resource
android-x64-arm64-20260721-en
Malware Config
Targets
-
- Target hi88_1.0.8_20260402.1426_release.apk
- Size 7.7MB
- SHA256 84684fb3e6ee9240ebd9c833d10f8c70e12e37a4e97c65d4bb7703d6ea5b6229
- MD5 075ecb81e576a4b4d6fd222114af0a3d
- SHA1 d1ecd77e169d359ff417225cb0cee464bbf07d03
- SHA512 47d3e63579e4f1238efd10ca0d238e55a2fe26a823d66fbb09bd39a1179c91c0b8f7b7e7e4b1fcaed1ec06ec67774943dbca1440702b908320d815bc4c562327
- SSDEEP 98304:TQsSep28/eBDM4SOJbUgiDHEzxUwCCmhwigtqyfMc+6YpfXzaj4QTAstffrfh2J:TQJOPeBYgxxWCLtqyfMcdYpi4cAsk
- TLSH T10B86CECAB388DF1BCC331172C89A153533678D6A5A474A76691837F829372B46F49FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2