General
- Target CloningTech.apk
- Size 1.7MB
- Sample261008-e3s1ba1z4n
- SHA256 ba6a7d6a8a7ad668bff26a9f6d0ab796c5e3c0f4299ee8c015047a416a8e9c17
- MD5 af0dc0ea92bfb6873ccf99936fee5d4e
- SHA1 0323330b121383a1944243b2b3894e7d78f0c987
- SHA512 210c57ff09acd2cfa16a27e8bb645f72a9b9bcca49f51b9438df2b68f8e8f6482478d705598f789b73149736067cbcb418621007f3249a3ff6f8a51d9c0d8ea6
- SSDEEP 24576:QU+rTpxHM8xJWc0Fwj9rya4hMbfr5ReEHfd:lq2a3/d
- TLSH T120854906D645BEE7DD9A8330D2F27F00A331DE6EAF87876B210CA5F12C872E16B95151
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
CloningTech.apk
Resource
android-35-x64-arm64-20260325-en
7 signatures
600 seconds
Malware Config
Targets
-
- Target CloningTech.apk
- Size 1.7MB
- SHA256 ba6a7d6a8a7ad668bff26a9f6d0ab796c5e3c0f4299ee8c015047a416a8e9c17
- MD5 af0dc0ea92bfb6873ccf99936fee5d4e
- SHA1 0323330b121383a1944243b2b3894e7d78f0c987
- SHA512 210c57ff09acd2cfa16a27e8bb645f72a9b9bcca49f51b9438df2b68f8e8f6482478d705598f789b73149736067cbcb418621007f3249a3ff6f8a51d9c0d8ea6
- SSDEEP 24576:QU+rTpxHM8xJWc0Fwj9rya4hMbfr5ReEHfd:lq2a3/d
- TLSH T120854906D645BEE7DD9A8330D2F27F00A331DE6EAF87876B210CA5F12C872E16B95151
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Declares services with permission to bind to the system
-
Requests allowing to install additional applications from unknown sources.
-
Requests dangerous framework permissions