General
- Target apkbuggratisbyfaldi_1792350136165.apk
- Size 22.1MB
- Sample261019-t27jmsge63
- SHA256 4a99fb6b9e514f4fbb96c24aa0eb6940eaccc4c15aec621cc79df75f8be3ad8d
- MD5 a49f9747785dfda7f7197f0227675382
- SHA1 49628b9f862a7ec8d9de19f9eb783855ae872f69
- SHA512 96c0677b68a9643d3643cc768402b196bc0c50f033a5113d554663f77f5a456d7aa239214a0813e1157afce67f23e993bca25eeabd87d5275998b8beef43066a
- SSDEEP 393216:WdnzO4vryYNsQG1c7nI8buRAdWAKETNKrjdTR5I2G0yngogfZddnQ:WdnzO4eYNq5JEWZR5IHngogjdnQ
- TLSH T1FF3712E6E7A4D41BC2F342FE82715AA500870C61CB13FB976936766E187B6C08F4B6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
apkbuggratisbyfaldi_1792350136165.apk
Resource
android-x64-arm64-20260325-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target apkbuggratisbyfaldi_1792350136165.apk
- Size 22.1MB
- SHA256 4a99fb6b9e514f4fbb96c24aa0eb6940eaccc4c15aec621cc79df75f8be3ad8d
- MD5 a49f9747785dfda7f7197f0227675382
- SHA1 49628b9f862a7ec8d9de19f9eb783855ae872f69
- SHA512 96c0677b68a9643d3643cc768402b196bc0c50f033a5113d554663f77f5a456d7aa239214a0813e1157afce67f23e993bca25eeabd87d5275998b8beef43066a
- SSDEEP 393216:WdnzO4vryYNsQG1c7nI8buRAdWAKETNKrjdTR5I2G0yngogfZddnQ:WdnzO4eYNq5JEWZR5IHngogjdnQ
- TLSH T1FF3712E6E7A4D41BC2F342FE82715AA500870C61CB13FB976936766E187B6C08F4B6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Family: MantaxOtax
MantaxOtax is an Android ransomware and spyware first seen in 2026.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries the mobile country code (MCC)
Reads information about phone network operator.
Tries to add a device administrator.