General
- Target download.apk
- Size 18.3MB
- Sample261014-g4vxeaxt8p
- SHA256 a4fefc6faa1b974a3acbebfe542b5dc9c8357099423da31d10f38d386c6b44b1
- MD5 d4ed71fbf40437f3f5582c11ef5f0696
- SHA1 f128f03dca53406822c4eeefefb5426136d7c72f
- SHA512 26a1af90e69db0dc68867cde9c45a16399ca0d5d3942b18885f7cc94b03f9d1fe374488347dd1440c7be52410cb88f0c79e3df810cc426b2c3167571a442958f
- SSDEEP 393216:7u4ysuFtPSMyRJnguj/ZKyBPFUcM0hjGyfNIDaUuk4/P5fmIgiT0B:twFtPSvRKuLsjy1qaUuH1mIg+I
- TLSH T192172342E768983FC877913316975236413ACC2A8A439B4B3A4C376C78B7AEC5F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
download.apk
Resource
android-x86-arm-20260325-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
download.apk
Resource
android-x64-20260325-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
download.apk
Resource
android-x64-arm64-20260325-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target download.apk
- Size 18.3MB
- SHA256 a4fefc6faa1b974a3acbebfe542b5dc9c8357099423da31d10f38d386c6b44b1
- MD5 d4ed71fbf40437f3f5582c11ef5f0696
- SHA1 f128f03dca53406822c4eeefefb5426136d7c72f
- SHA512 26a1af90e69db0dc68867cde9c45a16399ca0d5d3942b18885f7cc94b03f9d1fe374488347dd1440c7be52410cb88f0c79e3df810cc426b2c3167571a442958f
- SSDEEP 393216:7u4ysuFtPSMyRJnguj/ZKyBPFUcM0hjGyfNIDaUuk4/P5fmIgiT0B:twFtPSvRKuLsjy1qaUuH1mIg+I
- TLSH T192172342E768983FC877913316975236413ACC2A8A439B4B3A4C376C78B7AEC5F55BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1Virtualization/Sandbox Evasion
2System Checks
2Tasks
static1
Score
6/10
behavioral1
bankerdefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral2
bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral3
bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10