General
-
Target
e38d7ba21a48ad32963bfe6cb0203afe0839eca9a73268a67422109da282eae3
-
Size
2.9MB
-
Sample
220617-nmpsdsbgfp
-
MD5
db253c49fa9375e6eaa7f23661c58554
-
SHA1
527141e1ee5d76b55b7c7640f7dcf222cb93e010
-
SHA256
e38d7ba21a48ad32963bfe6cb0203afe0839eca9a73268a67422109da282eae3
-
SHA512
e15c29a45813977896487240692c5286053ca4e63f8da92709e4ea56ec354a039fcd5fe8168076da9d2e718cd89704e117e4ea690f5102383253f94f24ac362d
Malware Config
Targets
-
-
Target
e38d7ba21a48ad32963bfe6cb0203afe0839eca9a73268a67422109da282eae3
-
Size
2.9MB
-
MD5
db253c49fa9375e6eaa7f23661c58554
-
SHA1
527141e1ee5d76b55b7c7640f7dcf222cb93e010
-
SHA256
e38d7ba21a48ad32963bfe6cb0203afe0839eca9a73268a67422109da282eae3
-
SHA512
e15c29a45813977896487240692c5286053ca4e63f8da92709e4ea56ec354a039fcd5fe8168076da9d2e718cd89704e117e4ea690f5102383253f94f24ac362d
Score8/10-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
-
Requests cell location
Uses Android APIs to to get current cell information.
-
Acquires the wake lock.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Removes a system notification.
-
Uses Crypto APIs (Might try to encrypt user data).
-