General
- Target hezi--1012.apk
- Size 2.9MB
- Sample261006-g41snadd36
- SHA256 71b820ecd9da0a90e053b82c4b51bea09a15b7a42a2c024f841124b2be508c16
- MD5 8654a7bd21e62940aae6a10e2f000c3b
- SHA1 bafab538bd177087fa34abea497b4d64e3b776de
- SHA512 46746e71b498e103ef7b7a03515aa2373ff1e4b80f8f05584de9b0b0fa64c6fcaf39f7488e7c550d3435dc5a72636031a0f7e9b8537a26f4b79795e27fc19057
- SSDEEP 49152:+OF9DjX49Cgnt44/Nai2JQm2JBbyocDKKUBqf+6wUgoF172jxsNzauZ1CcvfUF7F:+a9nMe4/xCj2rbZmKKOO+I3F172j8BIH
- TLSH T109E5220AFB26A9DAC8F6C3BA0D3692391451CD358B5393876A51373D25FF7C40B2A9D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hezi--1012.apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
hezi--1012.apk
Resource
android-x64-20260721-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
hezi--1012.apk
Resource
android-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target hezi--1012.apk
- Size 2.9MB
- SHA256 71b820ecd9da0a90e053b82c4b51bea09a15b7a42a2c024f841124b2be508c16
- MD5 8654a7bd21e62940aae6a10e2f000c3b
- SHA1 bafab538bd177087fa34abea497b4d64e3b776de
- SHA512 46746e71b498e103ef7b7a03515aa2373ff1e4b80f8f05584de9b0b0fa64c6fcaf39f7488e7c550d3435dc5a72636031a0f7e9b8537a26f4b79795e27fc19057
- SSDEEP 49152:+OF9DjX49Cgnt44/Nai2JQm2JBbyocDKKUBqf+6wUgoF172jxsNzauZ1CcvfUF7F:+a9nMe4/xCj2rbZmKKOO+I3F172j8BIH
- TLSH T109E5220AFB26A9DAC8F6C3BA0D3692391451CD358B5393876A51373D25FF7C40B2A9D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Listens for changes in the sensor environment (might be used to detect emulation)