Resubmissions

23/10/2026, 18:09

261023-wrvhfac1216

23/10/2026, 18:08

261023-wqxw6sc12t6

23/10/2026, 18:05

261023-wpdrxafv4l7

General

  • Target
    spicy-lyrics-mobile-v0.14.4.apk
  • Size 18.2MB
  • Sample261023-wrvhfac121
  • SHA256 e02f2914902b179a72adfe271a8e95e0c3ba2f29e5acd2e58ac1326b4633d94d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      spicy-lyrics-mobile-v0.14.4.apk
    • Size 18.2MB
    • SHA256 e02f2914902b179a72adfe271a8e95e0c3ba2f29e5acd2e58ac1326b4633d94d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Acquires the wake lock

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Queries information about active data network

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks