General
- Target b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
- Size 9.4MB
- Sample261015-yscecsct3t
- SHA256 b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9
- MD5 6ed6cb2cb6657b41fe075d95f3799038
- SHA1 3df547004e5649048dd4b101ce9c0e777c7a9848
- SHA512 2b9a0df8a9dfed13ab32821d6655b10a040248542f9bac81b72dc41e9a4c3fdc678d2e1ce5160eea44b9c5c555ba140faab1145c357868782c06091adf04c46e
- SSDEEP 196608:SWUZ1THKEfkoD5BDeDDEnNkesgxrUvgkXJvGmMTQMPLl7hSB:sFHZkCDeXy/0ZvG02l7hSB
- TLSH T174A62317B751E2D1F830C1366A060EB7A2D59D106540B25A36CCB7FCABF3D988F886D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9.apk
- Size 9.4MB
- SHA256 b2fec79084611ad8abed3354399b2e759e903ec15976b9d10ac05e548964a1e9
- MD5 6ed6cb2cb6657b41fe075d95f3799038
- SHA1 3df547004e5649048dd4b101ce9c0e777c7a9848
- SHA512 2b9a0df8a9dfed13ab32821d6655b10a040248542f9bac81b72dc41e9a4c3fdc678d2e1ce5160eea44b9c5c555ba140faab1145c357868782c06091adf04c46e
- SSDEEP 196608:SWUZ1THKEfkoD5BDeDDEnNkesgxrUvgkXJvGmMTQMPLl7hSB:sFHZkCDeXy/0ZvG02l7hSB
- TLSH T174A62317B751E2D1F830C1366A060EB7A2D59D106540B25A36CCB7FCABF3D988F886D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)