General
- Target app.apk
- Size 2.7MB
- Sample261102-agsefadg37
- SHA256 c90bb5646476036fe5413827f2b495ccae6be25a62abb5cc9449dd0cd9bb7b44
- MD5 17e8718bd3c8c5c5f45b9915b21801cf
- SHA1 0c151f6a3a771c587dc64553b6d5b525e222bda2
- SHA512 b1fc72386335e09e0989b6035e23f6f15b7badf32fb8888920da0b452e7c7ae1277fe5ba16eb150adcb05f7c4c1d71ef5552af599f7f81ec8ff1b15176e68bae
- SSDEEP 49152:wQbM3M8pt4PtV9ioGshX1J9SLsUd5HzdF:wN8RJFvSLsizdF
- TLSH T102D5F6F1F7000A61D4D971357DFE8E10F62D6E8CD6CE7A060508B2B4BD6A2F17AA4687
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target app.apk
- Size 2.7MB
- SHA256 c90bb5646476036fe5413827f2b495ccae6be25a62abb5cc9449dd0cd9bb7b44
- MD5 17e8718bd3c8c5c5f45b9915b21801cf
- SHA1 0c151f6a3a771c587dc64553b6d5b525e222bda2
- SHA512 b1fc72386335e09e0989b6035e23f6f15b7badf32fb8888920da0b452e7c7ae1277fe5ba16eb150adcb05f7c4c1d71ef5552af599f7f81ec8ff1b15176e68bae
- SSDEEP 49152:wQbM3M8pt4PtV9ioGshX1J9SLsUd5HzdF:wN8RJFvSLsizdF
- TLSH T102D5F6F1F7000A61D4D971357DFE8E10F62D6E8CD6CE7A060508B2B4BD6A2F17AA4687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Acquires the wake lock
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network