General
- Target 5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e.apk
- Size 176KB
- Sample261109-pwtndazzd1
- SHA256 5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e
- MD5 8d84e880d08c356108b20139cd066f4f
- SHA1 e976c2884804d5f36682cdd0ec86235aaf87f024
- SHA512 1d93975ea30a8e36deff91ea9c29653aac849cfb13083d8329c86ab9a8488b4803dbc8c13d2a9fdcc7201058c6ee0beaed69acf923a3186f0e32066ca095ba76
- SSDEEP 3072:DBmFDpsBbxCSWCie9eUgGSKL4vt6UDfWx/7FCCi93NwWwZo:kDpsZUpeEGSact6iWx/Rvi93aWwZo
- TLSH T1780412A7FF7CA60EE2FE5731A5FE126700C65A54025A5F6C99107A7E00A3B8D02313ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e.apk
Resource
android-x86-arm-20260721-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e.apk
Resource
android-x64-arm64-20260721-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
chaomoinguoi.duckdns.org
Targets
-
- Target 5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e.apk
- Size 176KB
- SHA256 5c0771f5592ae3414d6468ad5f34e2f27291c9af8d6d72b770ee6e767bb5834e
- MD5 8d84e880d08c356108b20139cd066f4f
- SHA1 e976c2884804d5f36682cdd0ec86235aaf87f024
- SHA512 1d93975ea30a8e36deff91ea9c29653aac849cfb13083d8329c86ab9a8488b4803dbc8c13d2a9fdcc7201058c6ee0beaed69acf923a3186f0e32066ca095ba76
- SSDEEP 3072:DBmFDpsBbxCSWCie9eUgGSKL4vt6UDfWx/7FCCi93NwWwZo:kDpsZUpeEGSact6iWx/Rvi93aWwZo
- TLSH T1780412A7FF7CA60EE2FE5731A5FE126700C65A54025A5F6C99107A7E00A3B8D02313ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.