General
- Target app-armeabi-v7a-release.apk
- Size 28.6MB
- Sample261102-a7a8vazsds
- SHA256 d6b661d7f774005451c96c97ad10b012a3113d11a6f9489bb72e67ad4c745dbf
- MD5 154db2448b1c8b3c99025a99a9da3642
- SHA1 015c205b06736711dc0fcd2cb22c3ddbcb5479a6
- SHA512 70c2dfcf7f146e6fa46e21c05e262403f25d21a08d1c5c5f031d70a12722c7add04efd4547983ebade32fc39638b60b5e896eeda99b21b097a2b5696ee88e637
- SSDEEP 786432:ts+/1K/VS2PEFm4/QKKWWWqiCB1/LVkZFT9vqxCSQ:tsU1oVSir2QkWWB/T4xCSQ
- TLSH T15D6733C9F7E2DD2BE8798132565697E823105E00C58E8B0EE1C0736C69775E40E7ABE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app-armeabi-v7a-release.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target app-armeabi-v7a-release.apk
- Size 28.6MB
- SHA256 d6b661d7f774005451c96c97ad10b012a3113d11a6f9489bb72e67ad4c745dbf
- MD5 154db2448b1c8b3c99025a99a9da3642
- SHA1 015c205b06736711dc0fcd2cb22c3ddbcb5479a6
- SHA512 70c2dfcf7f146e6fa46e21c05e262403f25d21a08d1c5c5f031d70a12722c7add04efd4547983ebade32fc39638b60b5e896eeda99b21b097a2b5696ee88e637
- SSDEEP 786432:ts+/1K/VS2PEFm4/QKKWWWqiCB1/LVkZFT9vqxCSQ:tsU1oVSir2QkWWB/T4xCSQ
- TLSH T15D6733C9F7E2DD2BE8798132565697E823105E00C58E8B0EE1C0736C69775E40E7ABE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks the presence of a debugger