General
- Target _8.4.12.apk
- Size 5.3MB
- Sample261102-kvl5passbt
- SHA256 05fbcbc25f549c7f7a40dd78c986a80eecdb1db8590e35498e34f89bd80cdad8
- MD5 026d2e3e8c8c405c6bd8987d1d0c85a4
- SHA1 a84f4f1c16a3937d4ed9c4029bdb1172eec75066
- SHA512 8f4e48a30da924eaecbdc9ac4c9880444f9d06174d892cd9adfda99f2acade96424396a5e9a7771aaf2fbd602b62b79b4a2135d89da6bc320c32b8e43b3f005e
- SSDEEP 98304:njd4vOoXuiPDdvbFzPmMpaEzZqJprQFzOU4udsaS9ZLqGNY+PW5Slbo4r0lzVeXC:n+vXfLdz9holU4esPqGK+eYlbAlzVeXC
- TLSH T153460282F738142FE8F90631086D9236A6399F04CD96A70F2A54775C6A376D92F8DFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
_8.4.12.apk
Resource
android-35-x64-arm64-20260325-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target _8.4.12.apk
- Size 5.3MB
- SHA256 05fbcbc25f549c7f7a40dd78c986a80eecdb1db8590e35498e34f89bd80cdad8
- MD5 026d2e3e8c8c405c6bd8987d1d0c85a4
- SHA1 a84f4f1c16a3937d4ed9c4029bdb1172eec75066
- SHA512 8f4e48a30da924eaecbdc9ac4c9880444f9d06174d892cd9adfda99f2acade96424396a5e9a7771aaf2fbd602b62b79b4a2135d89da6bc320c32b8e43b3f005e
- SSDEEP 98304:njd4vOoXuiPDdvbFzPmMpaEzZqJprQFzOU4udsaS9ZLqGNY+PW5Slbo4r0lzVeXC:n+vXfLdz9holU4esPqGK+eYlbAlzVeXC
- TLSH T153460282F738142FE8F90631086D9236A6399F04CD96A70F2A54775C6A376D92F8DFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).