General
- Target LiquidIsland-2.0.0.apk
- Size 4.7MB
- Sample261027-elwpwabs9m
- SHA256 3e459ddacb185e3f23302f86d525c7374d4ed3a5a805597badc4a05eb528d16b
- MD5 00dc95f0da618683603f186f48351805
- SHA1 3361cc57948292d7505eabe91e43362c23f4f0ed
- SHA512 22bee3737b957cfb0febe7acc2e9efcd025f3e9a3a35e2f7fda87aada5227642b7bca8570b14dbb4e5be043e7aee3a40c80dd09d9659a66f43459c767bd72a57
- SSDEEP 98304:KG7pE3ydPV4DYRb30uWOhTjEwrbnU4YVad9bT6iQSBVhaJ5lDGYe:T7yiXAufhbhY0VmiQSBVh6bxe
- TLSH T1C4361115BA897C6FC833C1369D46D665642ADC6A9F93C707B0243B3D24BB3E48F192E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
LiquidIsland-2.0.0.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
LiquidIsland-2.0.0.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
LiquidIsland-2.0.0.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
LiquidIsland-2.0.0.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
LiquidIsland-2.0.0.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
LiquidIsland-2.0.0.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target LiquidIsland-2.0.0.apk
- Size 4.7MB
- SHA256 3e459ddacb185e3f23302f86d525c7374d4ed3a5a805597badc4a05eb528d16b
- MD5 00dc95f0da618683603f186f48351805
- SHA1 3361cc57948292d7505eabe91e43362c23f4f0ed
- SHA512 22bee3737b957cfb0febe7acc2e9efcd025f3e9a3a35e2f7fda87aada5227642b7bca8570b14dbb4e5be043e7aee3a40c80dd09d9659a66f43459c767bd72a57
- SSDEEP 98304:KG7pE3ydPV4DYRb30uWOhTjEwrbnU4YVad9bT6iQSBVhaJ5lDGYe:T7yiXAufhbhY0VmiQSBVh6bxe
- TLSH T1C4361115BA897C6FC833C1369D46D665642ADC6A9F93C707B0243B3D24BB3E48F192E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1System Network Connections Discovery
1