General
-
Target
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75.bin
-
Size
3.9MB
-
Sample
240629-11aa3s1clp
-
MD5
57a07ab202dfbe258dc298e7631b71a0
-
SHA1
5497816fd0c5a355cce5b3d9a832fcecf8ebc40b
-
SHA256
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75
-
SHA512
f4f57d9bc91aae3e658b54241435520ea5d3a37f10bc7c8c87f5db6ed3e8f24ac1d21642cf379a2cd68eb13cce70521c2f5962cf12e85148ce1d4909319144ba
-
SSDEEP
98304:bRJo8IWD4Hkq8LrrRA3RMGujqXsQUGVbk93iRl:bRJo8uHJ+rrRAmGqs+y
Static task
static1
Behavioral task
behavioral1
Sample
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75.bin
-
Size
3.9MB
-
MD5
57a07ab202dfbe258dc298e7631b71a0
-
SHA1
5497816fd0c5a355cce5b3d9a832fcecf8ebc40b
-
SHA256
d411d5e5ed3743779b26f0d4deac56347a8eae23e3002008859611596d330a75
-
SHA512
f4f57d9bc91aae3e658b54241435520ea5d3a37f10bc7c8c87f5db6ed3e8f24ac1d21642cf379a2cd68eb13cce70521c2f5962cf12e85148ce1d4909319144ba
-
SSDEEP
98304:bRJo8IWD4Hkq8LrrRA3RMGujqXsQUGVbk93iRl:bRJo8uHJ+rrRAmGqs+y
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the SMS messages.
-
Reads the content of the call log.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-