29f2f1bfb195aca71e9d9e5e81ceac00dc00d50a1e18ef079abde4ac673da794 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

cunwutong-1.6.6.apk

android-9-x86

6

cunwutong-1.6.6.apk

android-10-x64

7

cunwutong-1.6.6.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
cunwutong-1.6.6.apk
Size 3.2MB
Sample261107-pjv1nsysdz
SHA256 29f2f1bfb195aca71e9d9e5e81ceac00dc00d50a1e18ef079abde4ac673da794
MD5 e434cdd4c2747d4731aba4a5645aed7a
SHA1 f8569cb82e6efe8c0a805d9cd82040e4b796b518
SHA512 465afe9a9ebc9fb50a375c0be4d014834bfa8490c0e40462ed451df6056751ac906e79d6ad6ebcbe72883b651dfbad89d718fdafa0122c770e18dc91671b710b
SSDEEP 98304:XsJxA4uk9dq48rIoWu/AgA6X/2jhEnym/lFqpPX:8UkqrUovujhEJE
TLSH
T1CFF50182F7E66D2ECC3749360F9B626153568E13C683C70B9A98763C6C732D48E55BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android collection credential_access defense_evasion discovery impact persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cunwutong-1.6.6.apk

Resource

android-x86-arm-20260325-en

android-9-x86

5 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

cunwutong-1.6.6.apk

Resource

android-x64-20260325-en

android-10-x64

6 signatures

150 seconds

collection credential_access defense_evasion discovery impact persistence

Behavioral task

behavioral3

Sample

cunwutong-1.6.6.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

5 signatures

150 seconds

collection credential_access defense_evasion discovery impact

Malware Config

Targets

- Target
  cunwutong-1.6.6.apk
- Size 3.2MB
- SHA256 29f2f1bfb195aca71e9d9e5e81ceac00dc00d50a1e18ef079abde4ac673da794
- MD5 e434cdd4c2747d4731aba4a5645aed7a
- SHA1 f8569cb82e6efe8c0a805d9cd82040e4b796b518
- SHA512 465afe9a9ebc9fb50a375c0be4d014834bfa8490c0e40462ed451df6056751ac906e79d6ad6ebcbe72883b651dfbad89d718fdafa0122c770e18dc91671b710b
- SSDEEP 98304:XsJxA4uk9dq48rIoWu/AgA6X/2jhEnym/lFqpPX:8UkqrUovujhEJE
- TLSH
  T1CFF50182F7E66D2ECC3749360F9B626153568E13C683C70B9A98763C6C732D48E55BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

collectioncredential_accessdefense_evasiondiscoveryimpactpersistence

behavioral3

collectioncredential_accessdefense_evasiondiscoveryimpact

© 2018-2026

Terms | Privacy