Overview

overview

10

Static

static

10

9489ff7323...2d.apk

android-13-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d.apk
  • Size 23.6MB
  • Sample261109-gqadjsch53
  • SHA256 9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerratblackhawk

Malware Config

Extracted

Family

  • blackhawk

C2

  • https://www.mangcun.xyz

Signatures

  • Family: Black Hawk

    Black Hawk is an Android RAT first seen in 2026.

    trojaninfostealerratblackhawk
  • Android Black Hawk payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d.apk
    .apk 23.6MB

9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d.apk

  • SHA256 9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:x86arch:armarch:arm64

  • Android Black Hawk payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
233b9ae2847e76d76f8d21bca7a93d649eb40711346b60db4704cd06564e8d71
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
net.fast.mega.mega

Android Permissions

9489ff7323c88dac760481903b737a111d2192a828a0cccd609daa71dfc74b2d.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

net.fast.mega.mega.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION