General
- Target GreenTuber v0.2.0.2 (Premium) (2).apk
- Size 14.1MB
- Sample261030-yn6gmsfe23
- SHA256 fc25204b863ecb6e011c61b494be262cf2b19ce68a6fbfb753e27d2634f13e60
- MD5 358d2d306b20fe416a708532219f9a0e
- SHA1 379ec2d4331654eb7a55007e3c7c6e16f8e8b4db
- SHA512 5809e48b07c2fd93c8572703cbe22af4b073870f7ae435b7729e7a068698e4682933b5bd49c1db5fbb5598c83fac4ffcd28bacefedf813564aaf9f6309cdd59a
- SSDEEP 393216:LZBKF6mShIkmj2fnb8YypIedegPEI+kPFYQ:LZIEmSdfnqR9PEZxQ
- TLSH T1FEE61256B7886929C4361172CC4A36762E5D4D359F42AFC728C8375F28F3AE88F09BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GreenTuber v0.2.0.2 (Premium) (2).apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
GreenTuber v0.2.0.2 (Premium) (2).apk
Resource
android-x64-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
GreenTuber v0.2.0.2 (Premium) (2).apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target GreenTuber v0.2.0.2 (Premium) (2).apk
- Size 14.1MB
- SHA256 fc25204b863ecb6e011c61b494be262cf2b19ce68a6fbfb753e27d2634f13e60
- MD5 358d2d306b20fe416a708532219f9a0e
- SHA1 379ec2d4331654eb7a55007e3c7c6e16f8e8b4db
- SHA512 5809e48b07c2fd93c8572703cbe22af4b073870f7ae435b7729e7a068698e4682933b5bd49c1db5fbb5598c83fac4ffcd28bacefedf813564aaf9f6309cdd59a
- SSDEEP 393216:LZBKF6mShIkmj2fnb8YypIedegPEI+kPFYQ:LZIEmSdfnqR9PEZxQ
- TLSH T1FEE61256B7886929C4361172CC4A36762E5D4D359F42AFC728C8375F28F3AE88F09BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)