General
- Target ff8aaf49f4377e6ee162f1f0778f98e33dd2a8df2d96de6ba766851ee436467e.apk
- Size 19.1MB
- Sample261031-tx2slaev3p
- SHA256 ff8aaf49f4377e6ee162f1f0778f98e33dd2a8df2d96de6ba766851ee436467e
- MD5 d037c03d526c9a130b8dcd346a95d858
- SHA1 476d094e40b75d87a73d272c5a9fd6125e0cc8ae
- SHA512 337cfca614dfea0835dd193c874f83f020c140e99a116e92636b926da1fd4397cb6603ee5e478104d9f885b865c1976296d0843dbf16962054c859adc1044ed3
- SSDEEP 393216:JT6q2N1y8nGINjmzm5LAsolSsn0qynVXK8R0q9bKqLIopZJuk1:cNUgx+3yS0fVakKqLIUZJX
- TLSH T134172386F7D5EA07C477803286A34633104A8D2A9B22D6572715F37C2ABBDD05F4AECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ff8aaf49f4377e6ee162f1f0778f98e33dd2a8df2d96de6ba766851ee436467e.apk
Resource
android-x86-arm-20260325-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target ff8aaf49f4377e6ee162f1f0778f98e33dd2a8df2d96de6ba766851ee436467e.apk
- Size 19.1MB
- SHA256 ff8aaf49f4377e6ee162f1f0778f98e33dd2a8df2d96de6ba766851ee436467e
- MD5 d037c03d526c9a130b8dcd346a95d858
- SHA1 476d094e40b75d87a73d272c5a9fd6125e0cc8ae
- SHA512 337cfca614dfea0835dd193c874f83f020c140e99a116e92636b926da1fd4397cb6603ee5e478104d9f885b865c1976296d0843dbf16962054c859adc1044ed3
- SSDEEP 393216:JT6q2N1y8nGINjmzm5LAsolSsn0qynVXK8R0q9bKqLIopZJuk1:cNUgx+3yS0fVakKqLIUZJX
- TLSH T134172386F7D5EA07C477803286A34633104A8D2A9B22D6572715F37C2ABBDD05F4AECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Requests cell location
Uses Android APIs to to get current cell location.
Acquires the wake lock
Queries information about active data network
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
3System Checks
3