General
- Target Paint+The+Town+Red_114.0_apkcombo.com.apk
- Size 2.4MB
- Sample261006-bweybscd29
- SHA256 fb06eae4dc0fe50632b5f831bc4f404a03c6ba7f92bf0dd6728376bcade95404
- MD5 a692751666f987f4885979801eb4f3ad
- SHA1 cae49bd5e7a5d15d7a57ae02088a8dd2571323b4
- SHA512 60518995ea57cc208182c197a5d0a8a8a3c80a4ea96e5dec145a776ae0033f8e3eee855fbdc5be1edddcabddbe571ec62ee6d8851c9990aeeaf4cf7abb45cc16
- SSDEEP 49152:2ac9wgzJ+Co0HiWAkpWw+h/hEXKinXo3+Hted4hRe:2AgzJg0DJ+IXKinXo3+Hc
- TLSH T100C5F082F759EA27C8F3C33296B50B36664ACD248747E7471844B27C6DBF9C44A49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-33-x64-arm64-20260721-en
Behavioral task
behavioral2
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-34-x64-arm64-20260721-en
Behavioral task
behavioral5
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-35-x64-arm64-20260721-en
Behavioral task
behavioral6
Sample
Paint+The+Town+Red_114.0_apkcombo.com.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target Paint+The+Town+Red_114.0_apkcombo.com.apk
- Size 2.4MB
- SHA256 fb06eae4dc0fe50632b5f831bc4f404a03c6ba7f92bf0dd6728376bcade95404
- MD5 a692751666f987f4885979801eb4f3ad
- SHA1 cae49bd5e7a5d15d7a57ae02088a8dd2571323b4
- SHA512 60518995ea57cc208182c197a5d0a8a8a3c80a4ea96e5dec145a776ae0033f8e3eee855fbdc5be1edddcabddbe571ec62ee6d8851c9990aeeaf4cf7abb45cc16
- SSDEEP 49152:2ac9wgzJ+Co0HiWAkpWw+h/hEXKinXo3+Hted4hRe:2AgzJg0DJ+IXKinXo3+Hc
- TLSH T100C5F082F759EA27C8F3C33296B50B36664ACD248747E7471844B27C6DBF9C44A49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.