Resubmissions

06/10/2026, 07:09

261006-hywgesvsds7

06/10/2026, 07:04

261006-hv8ycasgnf7

General

  • Target
    app-release.apk
  • Size 8.5MB
  • Sample261006-hywgesvsds
  • SHA256 9e9ff8b81efb54af0c069fc38f778223ccf5c192c7a1cdf1bf4a9e83464c6e91
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      app-release.apk
    • Size 8.5MB
    • SHA256 9e9ff8b81efb54af0c069fc38f778223ccf5c192c7a1cdf1bf4a9e83464c6e91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Declares services with permission to bind to the system

    • Requests allowing to install additional applications from unknown sources.

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks