General
- Target withnaiProgressbar95-v1.1110-patches-v1.42.0.apk
- Size 152.8MB
- Sample261011-rr8ylsbb97
- SHA256 90384b863b417c6638c5d63ffafd17e1fb600ea4170bab44c0919fa752902b9a
- MD5 c88871f545be27b82ac9ba28e08b1b76
- SHA1 f5e1f551122725e693c6a9e4ee1c3e4a9f3a35fb
- SHA512 6ac6c77bcf6e39621c6d259dd69e16d0c690ae1fc0ec9e6e5051f99906b4abc087891d572c47f477ae19a31573b1f1d082a53187855174e2693fb8cc92f46733
- SSDEEP 3145728:jyBbAht8miWGo425pedZ8vYL5OtIeXP6RnkDKrj5X6S/36Snc0qg5wChb+WXAaac:jyBbAt8miWGo425pedZ8vYL5OtIeXP6t
- TLSH T1EE781242F7054E39E9A25630124B9331EB36AD55432387DF76ACB9293FB37804F59BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
withnaiProgressbar95-v1.1110-patches-v1.42.0.apk
Resource
android-x64-arm64-20260325-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target withnaiProgressbar95-v1.1110-patches-v1.42.0.apk
- Size 152.8MB
- SHA256 90384b863b417c6638c5d63ffafd17e1fb600ea4170bab44c0919fa752902b9a
- MD5 c88871f545be27b82ac9ba28e08b1b76
- SHA1 f5e1f551122725e693c6a9e4ee1c3e4a9f3a35fb
- SHA512 6ac6c77bcf6e39621c6d259dd69e16d0c690ae1fc0ec9e6e5051f99906b4abc087891d572c47f477ae19a31573b1f1d082a53187855174e2693fb8cc92f46733
- SSDEEP 3145728:jyBbAht8miWGo425pedZ8vYL5OtIeXP6RnkDKrj5X6S/36Snc0qg5wChb+WXAaac:jyBbAt8miWGo425pedZ8vYL5OtIeXP6t
- TLSH T1EE781242F7054E39E9A25630124B9331EB36AD55432387DF76ACB9293FB37804F59BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
2Conceal Multimedia Files
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3