General
- Target firefly.apk
- Size 388KB
- Sample261104-wwfvvaeb86
- SHA256 4624fc0091be189fd609a55a57636b1089619ca9ff60e87740a85675f753084e
- MD5 54f1d1e3a72d46b43a0940b54e9d15b1
- SHA1 746bf5f49882b232a1f844e743c9bd7e4a7d83c6
- SHA512 980aa48949b735d7642582f40bc725867c06401b744a9ebefd12bd0ea8a222c225047aa10369593c4ea345a04be7ef2605017580ff49c0b00fc9252772a916d9
- SSDEEP 12288:Ay/12qVl1XwcKMuEHaTjmPm/AUAM2f3CS8:AVqVl1XPpHafMl8
- TLSH T12684233795FC3A09D66546F5A1AABEE42C9CE8027130C54E5DE117AA3EE7831C6133F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
firefly.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
firefly.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
firefly.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target firefly.apk
- Size 388KB
- SHA256 4624fc0091be189fd609a55a57636b1089619ca9ff60e87740a85675f753084e
- MD5 54f1d1e3a72d46b43a0940b54e9d15b1
- SHA1 746bf5f49882b232a1f844e743c9bd7e4a7d83c6
- SHA512 980aa48949b735d7642582f40bc725867c06401b744a9ebefd12bd0ea8a222c225047aa10369593c4ea345a04be7ef2605017580ff49c0b00fc9252772a916d9
- SSDEEP 12288:Ay/12qVl1XwcKMuEHaTjmPm/AUAM2f3CS8:AVqVl1XPpHafMl8
- TLSH T12684233795FC3A09D66546F5A1AABEE42C9CE8027130C54E5DE117AA3EE7831C6133F8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1