General
- Target yuzhi-defense-v2.8.9-1123.apk
- Size 680KB
- Sample261029-w4y2dsssez
- SHA256 cb37c40f36534c677115ebc3764b9bdb7a17d9f0141c2b0e83b587ca9e123612
- MD5 dbeb77e7ce5b5b930edd4829a577e47e
- SHA1 623cff7cce6521e452e035719d2788ace08fde95
- SHA512 29857ddeed8f02a5ee4edc3a9e28526b064cd785019b1c47d5d882786786982cdedd11e95f1a082ea6f9c551a0f4f425bd7eb735e67c1f962bec4db2987675d7
- SSDEEP 12288:hE+PsWKMvtmyz6g1nWnl1CtUD3sHtA5qqtpVQkR8Z05a6WH8hSwZh:hEBW/vtB6gslg436qtp8XSSwn
- TLSH T1B1E42343CF4D4A9EF5E526B264AB9D24EEA94F97C682FBC21482E3343C371919720717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
yuzhi-defense-v2.8.9-1123.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
yuzhi-defense-v2.8.9-1123.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
yuzhi-defense-v2.8.9-1123.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target yuzhi-defense-v2.8.9-1123.apk
- Size 680KB
- SHA256 cb37c40f36534c677115ebc3764b9bdb7a17d9f0141c2b0e83b587ca9e123612
- MD5 dbeb77e7ce5b5b930edd4829a577e47e
- SHA1 623cff7cce6521e452e035719d2788ace08fde95
- SHA512 29857ddeed8f02a5ee4edc3a9e28526b064cd785019b1c47d5d882786786982cdedd11e95f1a082ea6f9c551a0f4f425bd7eb735e67c1f962bec4db2987675d7
- SSDEEP 12288:hE+PsWKMvtmyz6g1nWnl1CtUD3sHtA5qqtpVQkR8Z05a6WH8hSwZh:hEBW/vtB6gslg436qtp8XSSwn
- TLSH T1B1E42343CF4D4A9EF5E526B264AB9D24EEA94F97C682FBC21482E3343C371919720717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
Listens for changes in the sensor environment (might be used to detect emulation)